Anti-Spam Parameters |
The default SpIDer Mail settings, including Anti-Spam settings, are optimal for most cases. Do not change them unnecessarily. To enable or disable email scan for spam 1.Open Dr.Web menu 2.In the open window, click Files and Network tile. 3.Make sure Dr.Web operates in administrator mode (the lock at the bottom of the program window is open 4.Click the SpIDer Mail tile. A component parameters window opens. ![]() Figure 38. Email scan parameters 5.In the Anti-Spam section, enable or disable mail scan for spam using a corresponding switcher Configuring Anti-spam parameters 1.In the Anti-Spam group, click Parameters. ![]() Figure 39. Changing Anti-spam parameters 2.In the open Anti-Spam parameters window, enable or disable the necessary options. ![]() Figure 40. Anti-Spam parameters Available scan settings (enabled by default)
3.To save the settings, click OK. Additional information Anti-spam technologies Dr.Web Anti-spam technologies consist of rules that can be divided into several groups: •Heuristic analysis—a technology that empirically analyzes all parts of a message: header, message body, and attachments, if any. •Detection of evasion techniques—a technology that detects evasion techniques adopted by spammers to bypass anti-spam filters. •HTML signature analysis—a technology that compares messages containing HTML code with a list of known patterns from the anti-spam library. Such comparison, in combination with the data on sizes of images typically used by spammers, helps to protect users against spam messages with HTML code linked to online content. •Semantic analysis—a technology that compares the words and phrases of a message (both visible to the human eye and hidden) with words and phrases typical for spam using a special dictionary. •Anti-scamming—a technology that filters scam and pharming messages including so-called “Nigerian” scams, loan scams, lottery and casino scams, and false messages from banks and credit organizations. •Technical spam—a technology that detects bounces that are delivery-failure messages sent by a mail server. Such messages are also sent by a mail worm. The bounces are detected as unwanted. Processing mail by spam filter SpIDer Mail adds the following header to the processed messages: •X-DrWeb-SpamState: <value>, where <value> indicates whether the message is considered by SpIDer Mail as spam (Yes) or not (No). •X-DrWeb-SpamVersion: <version>, where <version> indicates Dr.Web Anti-spam version. •X-DrWeb-SpamReason: <spam rate>, where <spam rate> includes a list of evaluations on various spam criteria. You can use these headers and the prefix in the Subject field, if selected, to configure email filtering for your mail client.
To improve performance of the spam filter, you can report to Doctor Web errors in spam detection. If you find an error in the spam filter: 1.Create a new email and attach the message that was processed incorrectly. Messages included in the email body are not analyzed. 2.Send the message with the attachment to one of the following addresses: •If the attached message is detected as spam incorrectly, send the email to nonspam@drweb.com. •If the attached messages is an undetected spam, send it to spam@drweb.com. |