SpamFilter.ini additional settings

Top  Previous  Next

[server settings]

;Set this to 1 if you want to disable EHLO extensions

DisableEHLO=0

 

;Any emails whose text portion exceeds this number of KB will not be scanned for keywords and Bayes

;Higher values *may* catch more spam but will cause higher load on processor

MaxMsgSizeForKeywordScan=64

 

;Any emails whose size exceeds this number of KB will be whitelisted. Most spam emails are small in size, lowering this value may help in reducing the chances of incorrectly blocking valid emails with large attachments. The maximum value that can be specified for this setting is 2147483648 (equal to about 2TB)

MaxMsgSizeForSpamFiltering=768

 

;Set FilterBase64html to 1 if you want to block any emails with Content-Transfer-Encoding=base64 and Content-Type=text/html or text/plain

FilterBase64html=0

 

;Set RequireHELOBeforeMAILFROM to 0 if you do not want to require remote servers to issue a HELO or EHLO command before sending the email

RequireHELOBeforeMAILFROM=1

 

;Controls the minimum number of good and spam emails that must be received before the Bayesian filter kicks in

MinEmailsForBayesKickIn=5000

 

;by default SpamFilter will not allow any IP to relay thru it. Change DoNotTrustSelfByDefault to 1 if you want localhost to be able to relay

DoNotTrustSelfByDefault=0

 

;Remove any stale token in the corpus db.dat file that did not appear in incoming emails for the past n days

CleanUpCorpusIntervalDays=7

 

;Force disconnect of sessions if a command has not been received within the last nn seconds

ReadTimeout=60

 

;Timeout when delivering emails to the destination SMTP server (in seconds)

ReadTimeoutOutgoing=60

 

;if turned on, this will cause tokens in incoming emails being logged to screen with relevant probabilities

ShowBayesianTokens=0

 

;Set TagSPAMAndQuarantine=1 if you want to prefix every quarantine subject line with the prefix specified in SPAMTagPrefix ini parameter

TagSPAMAndQuarantine=0

 

;This SPAMTagPrefix will be prefixed to all subject lines marked for "mark as SPAM and deliver" along with the ation specified by TagSPAMAndQuarantine

SPAMTagPrefix=SPAM:

 

;This SPAMTagHeader will be added to the email headers for emails marked for "mark as SPAM and deliver" along with the ation specified by TagSPAMAndQuarantine

SPAMTagHeader=X-SF-SPAM:Y

 

;This WhitelistTagPrefix will be inserted in the Subject line of whitelisted emails if the option to tag whitelisted emails in the subject line has been enabled

WhitelistTagPrefix=[WHITELISTED]

 

;The following entries in the welcome banner, the "Received:" header, and the "X-Server" headers can be customized

ResponseWelcomeBanner=Welcome to SpamFilterISP SMTP Server %Ver%

XServerHeader=LogSat Software SMTP Server

XServerBanner=LogSat Software SMTP Server

 

;Setting DoNotSendNDROnQuarantine to 1 will prevent generation of NDR when email are quarantined by causing SpamFilter *not* to send an error code when quarantining emails

DoNotSendNDROnQuarantine=0

 

;Setting IncludeOriginalMessageOnNDR to 1 will cause the entire original email to be included when sending an NDR (non-deliverable receipt). Setting this value to 0 will cause only the original email's headers to be included in the NDR

IncludeOriginalMessageOnNDR=1

 

;If turned on, the threads that save to disk and load into memory the bayes corpus tokens will have increased priority

BoostBayesPriority=1

 

;if TrailingSQLSemiColon is set to 1 SpamFilter will add a ";" to the end of SQL statements. Disable only to help solve problems with some databases.

TrailingSQLSemiColon=1

 

;If turned on, any quarantined (false positives) emails that the end user force-delivers will cause the sender to be automatically whitelisted (NOTE - Starting from SpamFilter v3.5, this setting has been moved to the Filters.ini file located in the appropriate directory under the \SpamFilter\Domains directory structure)

AutoWhiteListForceDeliveryEnabled=1

 

;if EnableBadMailDir is set to 1, this will cause all emails that generate a "server error" when forwarded to your destination SMTP server will be saved in a "BadMailDir" for troubleshooting

EnableBadMailDir=0

 

;if ScanReceivedHeaders is set to 1 SpamFilter will add the "Received:" headers to the text examined for keywords and statistical Bayesian searches.

ScanReceivedHeaders=1

 

;if ScanAllHeaders is set to 1 SpamFilter will add all email's headers to the text examined for keywords and statistical Bayesian searches.

ScanAllHeaders=0

 

;To avoid backscatter, if an incoming email passes all filtering rules, but cannot be forwarded (ex. mailbox full, non-existent user), SpamFilter maintains open the incoming remote connection until it can verify with the destination server that the email can be delivered. If not, a 5xx error is output forcing the remote server to generate the NDR, rather than having SpamFilter send an NDR notification email

VerifyRCPTTOForCleanEmails=1

 

;Path to logfile directory

LogFilePath=

 

;Path to queue directory

QueuePath=

 

;Optional destination SMTP server where to forward SPAM emails only. Good emails are still forwarded to main SMTP server

DestSMTPServerForSPAM=

 

;Optional destination SMTP server's port where to forward SPAM emails only. Good emails are still forwarded to main SMTP server

DestSMTPServerForSPAMPort=

 

;If SpamFilter is configured to "tag and deliver" emails, you can also re-route all spam emails to a different email address.

;Spam emails can either be forwarded to an "absolute" email address, or to a specific email address or each domain.

;For example, to forward *ALL* spam emails to one specific email address (i.e. "SpamBucket@mydomain.com), use the following parameter:

;

;ForwardAllSPAMtoEmailAddress=SpamBucket@mydomain.com

;

;To forward all spam emails to a specific mailbox, depending on the recipient's domain - for example to forward all spam sent to

;the mydomain1.com to "SpamBucket@mydomain1.com", and to forward all spam sent to

;the mydomain2.com to "SpamBucket@mydomain2.com",

;use the following parameter, but leaving the domain name blank. SpamFilter will dynamically append the correct email domain depending on the recipient of the spam:

;ForwardAllSPAMtoEmailAddress=SpamBucket@

 

;If you want to comply with RFC5321/RFC2821 and accept emails to <postmaster> without domain name, specify here a destination email where you want those emails forwarded to.

;This will allow SpamFilter to receive emails addressed to <postmaster>, without applying any filtering rules as required by the RFCs, which would otherwise be rejected.

ForwardAllPostmasterEmailsTo=

 

;The frequency in seconds for which the quarantine table is scanned to check for emails pending delivery - includes web-access password registration emails

QuarantineToDeliverCheckInterval=5

 

;By default the activity logfile is saved to disk every 60 seconds. Set RealtimeDiskLogging=1 to save the log every time it is updated

RealtimeDiskLogging=0

 

;Add any IPs (separated by commas - no wildcards) that you do not wish to be automatically added to the Honeypot IP blacklist. This setting also prevents those IPs to be added to the IP cache blacklist, and to allow them to bypass the greylist filter

DoNotAddIPToHoneypot=

 

;An alternate server for sending NDR (non-delivery) notification emails can be used. Leave the "NotificationSMTPServer" value blank to use the default destination SMTP server

NotificationSMTPServer=

NotificationSMTPServerPort=25

 

;Set EnableDbgLogs=1 to enable separate detailed logging for troubleshooting purposes

EnableDbgLogs=

 

;The timeout in milliseconds for all DNS-related queries.

DNSTimeout=5000

 

;If an IP sends more than this number of spams in a certain period of time then it is temporarily banned (blacklisted)

IPCacheLimboCountTrigger=3

 

;If an IP sends more than a certain number of spams during this number of minutes then it is temporarily banned (blacklisted)

IPCacheLimboTimeTrigger=10

 

;If an IP address was banned because it sent too many spams in a certain time interval, it will be un-banned after this number of minutes

IPCacheBlacklistDuration=60

 

;Optionally flush to disk in the \SpamFilter\Domains directory 3 files with the contents of the list of IPs currently in memory for the IP Cache Blacklist, Limbo and GreyList. Set the interval in minutes for how often to export these lists, or enter 0 to disable.

ExportIPCachesToDiskIntervalMinutes=0

 

;You can force the antivirus plugin to block emails if they contain password protected archives that cannot be tested for viruses by setting this to 1

BlockArchivesWithPassword=0

 

;By default SpamFilter will only perform DNS lookups when the reverse DNS filter is enabled. Change value to 1 to always perform a reverse lookup on connecting IPs

AlwaysDoReverseDNSLookups=0

 

;Specifies how often the logfiles are rotated (Min=1, Max=24). The default is 24 (rotates at midnight). A value of 1 means every hour at the hour, value of 2 means at 2am, 4am, 6am etc...

RotateLogsEveryNNhours=24

 

;Change DoNotStartWithoutAV to 1 if you do not want SpamFilter to start/run if there is an error with the Antivirus plugin.

DoNotStartWithoutAV=0

 

;Number of hours SpamFilter will retry to deliver messages in queue to your destination SMTP server if it was unreachable. Enter 0 to try forever until back online.

ExpireRetryQueueHours=0

 

;Determines if SpamFilter should hold in the queue emails that were rejected by the destination SMTP server with an error in the 4xy range

QueueIfDestinationError4xy=1

 

;Determines if SpamFilter should hold in the queue emails that were rejected by the destination SMTP server with an error in the 5xy range

QueueIfDestinationError5xy=0

 

;Determines if SpamFilter should remove from the queue emails that could not be delivered to the destination SMTP server due to a "Read Timeout" (an NDR is sent if the email is removed from the queue)

DoQueueIfReadTimeout=1

 

;Image filter threshold. Higher values indicate a more aggressive filter. 0 disables the filter. Min=0, Max=15

SpamImageThreshold=10

 

;Image filter color sensitivity. Used internally to detect color shades

SpamImageColorSensitivity=20

 

;Images embedded in email's html having a width smaller than this will not be scanned. Useful to bypass signatures and logos

SpamImageMinWidth=300

 

;Images embedded in email's html having a height smaller than this will not be scanned. Useful to bypass signatures and logos

SpamImageMinHeight=300

 

;Determines the number of points that will be scanned in a image to process it for spam

SpamImageSamplingPoints=200

 

;to reduce false positives, emails with multiple inline images can bypass the image filter by setting this value to 1

SpamImagePassMultiImage=1

 

;Specify the max number of pages a PDF document must contain in order to be scanned for spam signatures. The scan will be skipped altogether if there are more than this number of pages. Specify 0 to disable scanning in PDF files

SpamPDFMaxPagesToScan=0

 

;Specify the max number height in pixel of a PDF pages that will be scanned for spam signatures. To reduce false positives, pages taller than this will not be scanned

SpamPDFMaxPixelHeight=800

 

;SpamFilter can block emails that contain only an empty, blank body and one of the following attachment. Clear the list if you don't want to stop such emails. Specify multiple attachments separated by commas

BlockBlankEmailsWithAttachments=*.pdf

 

;SpamFilter is able to block blank emails that contain specific attachments. This parameter is used to specify the threshold of characters below which an email is considered blank

MaxLettersToConsiderEmailBlank=2

 

;Set this to 0 to disable support for TLS

EnableTLSSupport=1

 

;Set this to 1 in order to disable support for the older TLS v1 protocol and only allow TLS v1.1 and TLS v1.2

DisableTLSv1_0=0

 

;Use this to enable/disable support for the non-secure SSLv3 to support older SMTP servers if needed

DisableSSLv3=1

 

;Customize the SSL Cipher list used by SpamFilter. The list uses the OpenSSL standard syntax, and by default is AES:ALL:!aNULL:!eNULL:+RC4:@STRENGTH

SSLCipherList=

 

;If the private key of the SSL certificate is protected by a password, enter is here

SSLCertificatePassword=

 

;Some older email clients have a bug that requires them to see "AUTH=LOGIN" in the EHLO response rather than "AUTH LOGIN". Set this to 1 to add the incorrect syntax to the EHLO output. Changes to this setting require SpamFilter to be restarted

AddIncorrectAUTHLOGINEHLOEntry=0

 

;SpamFilter will add to the logfile the username and password used for an unsuccessful AUTH LOGIN attempt to help determine intentional password guessing attempts or user error. Change this parameter to 0 to prevent the password to be written to the logfile.

LogInvalidPasswords=1

 

 

;Timeout in seconds used in the some SQL commands (Ex. inserting a new record in the tblQuarantine table)

MiscSQLTimeout=5

 

;Timeout in milliseconds indicating how long SpamFilter waits for the remote destination SMTP server to acknowledge the RCPT TO command to verify the validy of the recipient for a clean email being delivered

RCPTTOVerificationTimeout=30000

 

;SpamFilter Enterprise will delete temporary entries in the tblReloadTableInfo after they have been kept for this long. This parameter is used to allow multiple installations of SpamFilter Enterprise to maintain their settings in sync. It can be reduced to 5-10 seconds for installations running only one instance of SpamFilter Enterprise

SecondsToHoldEntriesIntblReloadTableInfo=600

 

;For SpamFilter Enterprise only, the max amount of time that the process that checks for settings updates in the database is allowed to run for. Normally this takes a few tenths of a second, but if hosting tens of thousands of domains, each with customized settings, this could take longer

ChecktblReloadTableMaxRunTimeMinutes=10

 

;How often (in seconds) to run the process that checks connectivity on the default SMTP port and kills the entire SpamFilter process in that case so the Windows service recovery will take effect and relaunch it within a minute

WatchdogTimer=60

 

;If the "AuthorizedTO" whitelist is used to specify the list of valid email addresses that can be accepted, by default SpamFilter will terminate a connection when the remote server specifies an invalid address in the RCPT TO command. You can use the following option to disable this forced disconnect, and cause SpamFilter to simply reject the invalid recipient, and continue to accept additional ones

DisconnectOnNonAuthorizedTO=true

 

;Use this option to prevent SpamFilter from performing the routine cleanup of the quarantine database by deleting old archived emails. Useful if admins want to perform their own cleanup

DoNotDeleteExpiredEmailsFromQuarantine=false

 

;The amount of time in minutes the hash signature for an email content is kept in memory. If another signature is not received during this time, the has is removed from memory. Used in the SFDC filter

HashCacheBlacklistDuration=60

 

;The interval in seconds that must pass from the initial connection of an IP address to when it is allowed to connect to SpamFilter again. Used in the greylist filter

GreyListInterval=300

 

;The number of hours for which an IP will be held in the GreyList limbo before being removed. If the IP does not make a second attempt to deliver email before this many hours after the initial attempt, it will be removed from the GreyList limbo, and it will have to repeat the process next time it connects.

GreyListLimboHold=12

 

;The number of days for which an IP that passed the GreyList limbo and has been allowed to connect will remain allowed to do so. After this many days from the initial contact, the GreyList process will have to be repeated.

GreyListAllowedHold=60

 

;Set thie value to 1 to enable the GreyList filter

GreyListEnabled=0

 

;Set this value to 1 if you want to prevent SpamFilter from adding the "X-SF-WhiteListedReason" header in whitelisted emails

HideXSFWhiteListedReasonHeader=0

 

;Set this value to 1 if you want to prevent SpamFilter from logging the specific keywords that caused a reject in the  "X-Rejection-Reason" header in blocked emails

HideXSFBlockedKeywordsReasonHeader=0

 

;If enabled SpamFilter will add an X-AuthUser header with the authenticated username for SMTP AUTH

AddHeaderForAuthUsers=1

 

;If AddHeaderForAuthUsers, this string will be used to identify the header with the username being added

XAuthUserString=X-SF-AuthUser

 

;Use this value to limit the number of nested include directives allowed in an SPF query. Used to limit the risk of DoS attacks using malicious SPF DNS records

MaxSPFAllowedLoops=20

 

;Use these parameters to limit how many emails users authenticated by AUTH LOGIN can send in a determined amount of time during the same SMTP session. Set these values to 0 to remove any limits

AUTHLOGINEmailsInIntervalMax=10

AUTHLOGINEmailsInIntervalMinutes=1000

 

 

;Add here any IPs that are allowed to use the XFORWARD extension to pass the original IP of the sender in case the email is being relayed by a server placed in front of SpamFilter, so that all IP-based tests can still be performed

AuthIPsForXforwardCommand=

 

 

;When disabling the generation of the AutoWhiteList by setting AutoWhiteListForceDeliveryEnabled=0, you can still allow SpamFilter to process the entries that exist in the WL_AutoWhiteListForceDelivery.txt whitelist by setting ProcessListEvenIfAutoWhiteListForceDeliveryDisabled=1. Useful if you manage your own WL_AutoWhiteListForceDelivery

ProcessListEvenIfAutoWhiteListForceDeliveryDisabled=0

 

;SpamFilter will try to force Windows to reduce the "Memory Working Set" assigned to SpamFilter so as to lower the amount of RAM used by SpamFilter's process. Useful for 32bit implementations of SpamFilter that process over 1 million emails/day and host thousands of domains.

MemoryEmptyWorkingSetEveryNhours=24

 

 

;SpamFilter uses the http and https protocols to query the SFDB database and to download antivirus updates. You can specify a proxy to use for these operations the the option in the [proxy settings] section

[proxy settings]

ProxyServer=

ProxyUsername=

ProxyPassword=

ProxyPort=0

ProxyBasicAuthentication=0

 

[authentication settings]

;By setting this parameter to 1, SpamFilter will automatically add the Active Directory domain name prefix to the username. For example, if the AD domain is logsat.com, and the username is JohnW, SpamFilter will automatically authenticate the user as logsat.com\JohnW

ActiveDirectoryAuthPrefixDefaultDomain=0

 

;By setting this parameter to 1, SpamFilter will automatically add the Active Directory domain name suffix to the username. For example, if the AD domain is logsat.com, and the username is JohnW, SpamFilter will automatically authenticate the user as JohnW@logsat.com

ActiveDirectoryAuthAppendDefaultDomain=0