Trusted and Untrusted Mail Sources. Watchguard XCS

Intercept Anti-Spam

ReputationAuthority

The ReputationAuthority helps to identify spam by reporting a collection of metrics about the sender of a mail message, including their overall reputation, whether the sender is a dial-up, and whether the sender appears to be virus-infected, based on information collected from installed WatchGuard XCS products and global DNS Block Lists. This information can be used by Intercept to reject the message, or used as part of the overall anti-spam decision.

Token Analysis

Detects spam based on advanced content analysis using databases of known spam and valid mail.

Backscatter Detection

Detects spam based on signature verification of the Envelope Sender to prevent spam bounce emails to forged sender addresses.

Sender Policy Framework (SPF)

Performs a check of a sending host’s SPF DNS records to identify and validate the source of a message to determine whether a message was spoofed.

DomainKeys Authentication

Performs a check of a sending host’s DomainKeys DNS records to identify and validate the source of a message to determine whether a message was spoofed.

Trusted and Untrusted Mail Sources

The WatchGuard XCS must be properly configured for interaction with local and remote mail servers. The system only processes mail through the spam filters when a message originates from an untrusted source.

Mail from trusted sources bypass the spam controls.

There are two ways to control how sources of mail are identified and trusted:

ƒ Trusted Subnet — All mail from a specific network interface is considered trusted.

ƒ Specific Access Pattern — An IP address (or address block), server, or domain name is identified as trusted using a specific access pattern rule.

164 WatchGuard XCS