4. Spam Detection
4.1 Personal Content Allow/Block Policy
As a user, click "Email Security > Spam Detection > Personal Content Allow/Block Policy" to customize your personal mail content allow/block policies.
Add Mail Content Allow Policy
Click the [Add Rule] button, then enter a condition — for example: Sender contains @example.com — select the action [Mark as Normal Mail and Deliver Directly], then click the [Save] button.
Add Mail Content Block Policy
Click the [Add Rule] button, enter a condition — for example: Mail body contains malicious URL — select the action [Delete], then click the [Save] button.
The following table lists the conditions available for mail content allow/block policies:
| Option | Regex Example |
| Sender | /.*@example.com/i |
| Sender (Envelope-From) | /.*@example.com/i |
| Sender IP Address | 172.16.1.1, 172.16.1.1/24, 172.16.1.1/255.255.255.0 |
| Recipient | /.*@example.com/i |
| Reply-To Header | /.*@example.com/i |
| Subject | /.*example.*/i |
| Mail Body | /.*valuable.*/i |
| Mail Body (Undecoded) | /.*=A5@=A8@A4H=B6.*/i |
| Attachment Name | /.*\.exe/i |
| Attachment Type | Selected by user |
| Attachment Content | /.*price\slist.*/i |
| Mail Size | >10M |
| Recipient Count | >10 |
| Recipient Count (To / CC) | >10 |
| Mail Size x Recipient Count | >10M |
| Mail Header | /Subject:.*adv.*/i |
| Mail Body Contains Malicious URL | URL determined to be malicious by Sophos Threat Intelligence / URIBL / MailGates Cloud Database |
| Mail Determined Malicious by Sophos Threat Intelligence | Mail header / subject / source IP / body / signature determined to be malicious by Sophos Threat Intelligence |
The following table lists the actions available for mail content allow policies:
| Option | Description |
| Mark as Normal Mail and Apply Threat Policy Action | Default |
| Mark as Normal Mail and Deliver Directly | |
| Mark Mail Header | |
| Mark Mail Subject | Up to 100 characters |
| Mark Mail Body | Up to 500 characters |
| Convert Mail to UTF-8 Encoding |
The following table lists the actions available for mail content block policies:
| Option | Description |
| Mark as Spam and Apply Threat Policy Action | Default |
| Hold Mail in System/Domain/Personal Spam Quarantine | |
| Mark Mail Header | |
| Mark Mail Subject | Up to 100 characters |
| Mark Mail Body | Up to 500 characters |
| Convert Mail to UTF-8 Encoding |