Page tree
Skip to end of metadata
Go to start of metadata

Spam filter

The spam filter provides you with an extensive range of settings options for effectively blocking email with undesirable content or from undesirable senders (e.g. mass email senders). The program checks for numerous email characteristics that are typical of spam. These characteristics are used to calculate a value reflecting the likelihood of it being spam. You can use the USE SPAM FILTER button to enable or disable the spam filter.

In order to switch the different filter types of the spam filter on or off, simply set or remove the checkmark in front of the respective entry. To make changes to the various filters, just click on the relevant entry. A dialog then appears for changing the parameters.

The following settings options are available:

  • Spam OutbreakShield: The OutbreakShield detects and neutralises threats from malicious programs in mass emails before the relevant up-to-date virus signatures become available. OutbreakShield uses the Internet to monitor increased volumes of suspicious email, enabling it to close the window between the mass mail outbreak and its containment with specially adapted virus signatures, practically in real time. If you use a computer downstream from a proxy server, click on the Internet settings button to carry out the relevant changes. You should change these settings only if your OutbreakShield doesn't function.
  • Use whitelist: Certain sender addresses or domains can be explicitly excluded from suspected spam via the whitelist. Simply enter the email address (e.g. newsletter@infosite.com) or domain (e.g. infosite.com) that you want to exclude from suspected spam in the Addresses/Domains field and the G DATA software will treat messages from that sender or sender domain as not spam.

You can use the IMPORT button to insert predefined lists of email addresses or domains into the whitelist. Each address or domain must be listed on a separate line. A plain txt file format is used for storing this list; you can create this list using Windows Notepad for example. You can also use the EXPORT button to export whitelists as text files.

  • Use blacklist: Certain sender addresses or domains can be explicitly flagged as suspected spam via the blacklist. Simply enter the email address (e.g. newsletter@megaspam.de.vu) or domain (e.g. megaspam.de.vu) that you want to check for spam in the Addresses/Domains field and the G DATA software will generally treat emails from that sender or sender domain as emails with a very high spam probability. You can use the IMPORT button to insert predefined lists of email addresses or domains into the blacklist. Each address or domain must be listed on a separate line. A plain txt file format is used for storing this list; you can create this list using Windows Notepad for example. With the EXPORT button you can export blacklists as text files.
  • Use real-time blacklists (default setting): You can find lists on the Internet that contain the IP addresses of servers known to send spam. The G DATA software uses queries to the real-time blacklists to determine whether the sending server is listed. If it is, this increases the probability that it is spam. In general, we recommend that you use the default settings here, although you can also add your own Internet addresses to blacklists 1, 2 and 3.
  • Use keywords (email text): By defining a list of keywords you can also identify suspected spam through the words used in the email text. If at least one of these terms is included in the email text, the spam probability increases. You can change this list how you want by using the ADD, CHANGE and DELETE buttons. You can add predefined lists of keywords to your list using the IMPORT button. Entries in such a list must be listed one below the other in separate lines. A plain txt file format is used for storing this list; you can create this list using Windows Notepad for example. You can also use the EXPORT button to export a list of keywords as a text file. By checking Search for whole words only, you can specify that the G DATA software will only search for complete words in the subject line of an email.
  • Use keywords (subject): You can also identify suspected spam messages through the text in the subject line by defining a list of keywords. An occurrence of at least one of the listed terms in the subject line increases the spam probability.
  • Use content filter: The content filter is a self-learning filter that calculates spam probability on the basis of the words used in the email text. This filter not only works on the basis of predefined word lists but also learns from each new email received. You can view the word lists that are used by the content filter for identifying email as spam via the Query table contents button. You can delete all words in this table by using the Reset tables button, after which the content filter will restart its learning process again from the beginning.

Reaction

Here you can define how the spam filter should process email messages that may contain spam. You can use the spam probability value calculated for the affected email by the G DATA software to define three different levels of filtering.

  • Suspected spam: Here you can define how those email messages in which the G DATA software finds individual spam elements are handled. Such messages may not generally be spam, but can also be newsletters or part of a mass mailing that is of interest to the recipient in rare cases. In such cases, it is recommended that you inform the recipient that the email is suspected spam.
  • High spam probability: This covers emails that contain many spam characteristics and are rarely of interest to the recipient.
  • Very high spam probability: These are emails that meet all the criteria of spam. Such emails are rarely wanted, and rejecting email with these characteristics is recommended in most cases.

Each of these three graduated reactions can be customized. Simply click on the CHANGE button and define the response that the G DATA software should use. The Reject mail option allows you to specify that the email messages do not reach your mailbox. And with Insert spam warning in mail subject and mail text you can call attention to email messages that have been identified as spam to enable these to be filtered more easily. If you use Microsoft Outlook (caution: not to be confused with Outlook Express or Windows Mail), you also have the option of moving emails containing suspected spam to a fully customizable folder in your mailbox (Move mail to folder). You can create this folder directly via the G DATA software by defining the corresponding folder under Folder name.

Note: Even if you do not use Outlook, email messages that have been identified as spam can be moved to a different folder. Just add an alert in the subject line of the message (for instance "[Spam]") and define a rule in your email program to move emails with this text in the subject line to a different folder.

Advanced settings

This area enables you to make detailed changes to the G DATA software spam detection, adapting the system to suit your email traffic. However, it is generally recommended that default settings are used here. Making changes in the advanced settings should only be done if you have the relevant expertise and know exactly what you are doing.

  • No labels