Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Symantec Mail Security for Exchange (7.5) - Block PHP Links Unless Whitelisted / Hold Mail and allow to be released

Posted on 2014-12-29
2
370 Views
Last Modified: 2014-12-31
Is it possible to set up a spam filtering rule that will block all emails with PHP links in them unless the email address is whitelisted? Also, can any mail that is blocked be held and reviewed and either deleted/released periodically?
0
Comment
Question by:street9009
2 Comments
 
LVL 63

Accepted Solution

by:
btan earned 500 total points
ID: 40523276
From the below, it may fall in the "If a message contains suspicious URL content" condition but this does not necessary block all PHP links. in fact, i tend to miss the use case why the need for blocking all PHP as some may be legitimate link too. It may be better for the SPAM engine to score that URL and state the action. The whitelist can still applies as required.
http://www.symantec.com/business/support/index?page=content&id=HOWTO53444#v11832917

There is also mention of content filter to handle spoofed url below besides just suspicious URL check
http://www.symantec.com/connect/forums/spoofing-urls-not-blocked

If there are really missed SPAM messages that bypass the check as false negative then you can also consider "customer-specific spam submissions" whereby messages can be submitted to Symantec
http://www.symantec.com/business/support/index?page=content&id=HOWTO77718#v63987512

But do note the "How rules are created and why messages may not result in custom rules" on the check steps
http://www.symantec.com/business/support/index?page=content&id=HOWTO77736#v66562137
0
 

Author Closing Comment

by:street9009
ID: 40525292
Thank you!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question