Comodo Help
Find the desired product help
Xcitium Secure Email Gateway MSP

Xcitium Secure Email Gateway MSP

Admin Guide

English

Print Help Download Help
Domain Management > Manage A Domain > Incoming > Incoming Spam Detection Settings
  • Introduction To Xcitium Secure Email Gateway - MSP
    • Purchase Licenses
    • License Information
  • Get Started
    • Incoming Filtering Configuration
      • Configure Your Mail Server
      • Configure MX Record
        • Update MX Records In Windows 2003/2008 Server
        • Update MX Records On A Host Using BIND (and The Named Daemon)
        • Update MX Records For Comodo DNS
        • Update MX Records For GoDaddy
        • Update MX Records For Enom
        • Update MX Records For Network Solutions
        • Update MX Records For Yahoo! Small Business
        • Update MX Records For 1and1
        • Update MX Records For 4D Web Hosting
        • Update MX Records For DNS Park
        • Update MX Records For DreamHost
        • Update MX Records For DynDNS
        • Update MX Records For IX Web Hosting
        • Update MX Records For No-IP
        • Update MX Records In CPanel
    • Outgoing Filter Configuration
      • Per-User Authentication
      • Outgoing Smarthost Setup
        • Configure QMail To Use A Smarthost
        • Configure PostFix To Use A Smarthost
        • Configure Sendmail To Use A Smarthost
        • Configure Exchange 2000/2003 To Use A Smarthost
        • Configure Exchange 2007/2010 To Use A Smarthost
        • Configure Exchange 2013/2016 To Use A Smarthost
        • Configure Office 365 To Use A Smarthost
        • Configure Exim To Use A Smarthost
          • Configure Exim / CPanel To Use A Smarthost
          • Configure Exim / Directadmin To Use A Smarthost
      • DNS Configuration
  • Login To The Admin Console
  • The Admin Console
  • The Dashboard Area
  • Domain Management
    • Add A Domain
    • Delete Domains
    • Edit Domains
    • Validate Domains
    • Manage A Domain
      • Domain Dashboard
      • Incoming
        • Quarantine
        • Manage Archived Mails
        • Incoming Spam Detection Settings
        • Report Spam
        • Delivery Queue
        • Destination Routes
        • Local Recipients
        • Clear Incoming Cache
        • Log Search
        • Domain Aliases
        • Domain Settings
        • Manage Report Subscriptions For Selected Domain
        • Relay Restrictions
        • Geolocation Restrictions
        • SPF Control Settings
      • Outgoing
        • Clear Outgoing Cache
        • Log Search
        • Users
        • Office 365 Activation
      • Email Management
        • Email Size Restriction
        • Blocked Extensions
        • Released Requests
        • Blacklisted Requests
        • White-listed Requests
      • Domain Audit Log
        • Audit Log Configuration
        • View Domain Log
      • Domain Rules
        • Rules
        • TLD And GTLD Rules
        • Recipient Whitelist
        • Sender Whitelist
        • Recipient Blacklist
        • Sender Blacklist
        • Whitelist Senders Per User
        • Blacklist Senders Per User
      • Account Management
        • User Account Management
        • Manage User Auto-import
        • View User History
        • Import Users From LDAP
          • LDAP Import Configuration
          • LDAP Import Confirmation List
          • LDAP Import Ignore List
  • Audit Log
  • Administrator Account Management
    • Administrators
    • User Groups & Permissions
    • Admin Groups & Permissions
    • My Comodo Account
    • My Profile
    • Users History
  • Customer Management
    • End User License And Subscriber Agreements
    • View License Information
    • Manage Report Subscriptions
    • Notification Email Settings
  • CSEG Reports - An Overview
    • Quarantine Report
    • Domain Statistics Report
    • Auto-Imported Users Report
    • Quarantine Release Report
    • Reported Spam Report
  • Appendix 1 - CSEG Error Codes
  • Appendix 3 - Troubleshooting LDAP
  • Appendix 4 - Useful Links
  • About Xcitium Security Solutions

Incoming Spam Detection Settings


This area lets you configure the sensitivity of the spam filter and general settings such as spam notation and quarantine retention.

  • CSEG runs several rules on each email as it passes through the spam filters.
  • Each rule checks the mail for a specific spam attribute. The rule will assign a score to a mail based on the degree to which the mail exhibits that attribute.
  • A message's total spam score depends on the weighted value of all rules combined.

For example, if you set the spam threshold to 0.33, any mail that has a score higher than 0.33 will be treated as spam and quarantined. The higher the threshold, the more likely that some spam messages may get delivered. The maximum possible threshold is 1. We advise you to test settings for a week to arrive at the best setting for your company.


Configure incoming spam detection

  • Click 'Incoming' on the left and choose 'Spam detection Settings'




This opens the spam detection interface for the selected domain:




  • Quarantine enabled
  • Enabled - Mail identified as spam is quarantined.
  • Disabled – Spam is not quarantined but is delivered with a modified subject line. You can set the text which is appended to the subject line in the Probable Spam notation / Spam Notation fields.
Messages identified as 'probable spam' are always sent to the recipient, and not quarantined, even if this option is enabled. See 'Probable spam threshold setting' to set the sensitivity.
  • Days saved - Enter the number of days that you want mails to be retained in quarantine. The maximum number of days that can be set is 9999. Quarantined mails that are not checked, released or deleted within the stipulated days will be automatically deleted from quarantine.
  • Spam threshold - Enter any value between 0.1 and 1.0. All mails with a score above that value are classed as spam and quarantined as explained above.
  • Spam notation - The prefix that will be appended to the subject line of all 'Spam' emails sent to users. For example, " Order two Rolex watches and get a free carton of Viagra" - where is the text entered in the 'Spam notation' field. Note - this only applies IF quarantine has been disabled (i.e. If the 'Quarantine Enabled' box is not checked).
  • Probable spam threshold - Enter any value between 0.0 and the value entered in Spam threshold field. All mails that are having a score value above that is set in this field will be identified as unsure mails and will be delivered to recipients with the subject line as set in the Probable Spam notation / Spam Notation field.
  • Probable spam notation - The prefix that will be appended to the subject line of all 'probable spam' emails sent to users. For example, " Cheap deals on Dell computers" - where is the text entered in the 'Probable spam notation' field.
  • Quarantine response - Choose the response to be sent by CSEG to the SMTP server that delivered a message in the event that a mail is identified as spam.

  • Note - If you have enabled quarantine functionality, then spam/malicious mail will be quarantined (and not delivered to the recipient) regardless of your choice here. These options merely determine what message CSEG will send back to the SMTP mail server. The available options are:

  • Rejected - Will inform the SMTP server that the email has been rejected by CSEG and placed in quarantine.
  • Accepted - The email has passed the CSEG spam filters and detected as a spam will be placed in quarantine in silent mode.
  • Spam email - Displays the email address to which the mails reported as spam from the 'Report Spam' interface and the 'Archive' interface will be forwarded. By default, mails reported as spam by the administrators will be forwarded to [email protected] for analysis by experts at Comodo. Once a reported mail is confirmed as spam, Comodo will update its mail filters to quarantine similar mails in future. Refer to the explanations under Manage Archived Mails and Report Spam for more details on forwarding the suspicious mails for analysis.
  • Notify user about new quarantine message - Select this option if you wish CSEG to send a notification email to the intended recipient, if a spam email addressed to the recipient is intercepted by CSEG and moved to Quarantine. The notification email will contain a link to the email and a link for the user to login to the CSEG User interface.
  • The recipient will be able to click the link to directly read the email, without logging-in to CSEG. The lifetime of the link is one day. If the user has not clicked the link within a day, the link will expire.
  • If the user needs to respond to or delete the quarantined email, the user can click the next link to login to CSEG, view their quarantined mails and carry out their desired actions
  • Suspicious attachment notation - The prefix that will be appended to the subject line of all mails identified with suspicious attachments like malware and macros and forwarded to the recipient or to a different email address, a configured in the Domain Rules. Refer to the explanation under Rules in the section Domain Rules for more details. For example, "[Suspicious attachment] Your lucky draw" - where [Suspicious attachment] is the text entered in the 'Suspicious attachment notation' field.

  • Comodo RBL - Comodo's Real-time Blackhole List (RBL) is a blacklist of locations which are known to send spam. This list is continuously updated by Comodo.

  • Quarantine message – If the IP address of the message sender is in the RBL, then the incoming email will be quarantined.
  • Reject message - If the IP address of the message sender is in the RBL, then the incoming email will be rejected.
  • Disabled - CSEG filters will not check Comodo RBL.
  • Reject emails contains credit card number - If enabled, emails that contain credit card numbers will be rejected. Credit card numbers have a certain structure that CSEG filters can recognize, so emails containing random numbers will not be rejected.

  • Blacklist action – Specify the action if CSEG detects messages from blacklisted sources such as blacklisted domains, senders, users and recipients.
  • Reject message – If enabled, incoming emails from blacklisted sources are rejected.
  • Quarantine message – If enabled, incoming emails from blacklisted sources are placed in quarantine. Response to the sender depends on the ‘Quarantine response’ settings.
    • Enable Containment - Containment is a security technology whereby email attachments with an 'unknown' trust rating are run inside a secure, sandbox environment.
    • Files in containment are run with heavily restricted privileges. They cannot access other processes, cannot access important system files, and cannot access user data.
    • This setting will contain unknown attachments of the following file types - .exe, .pdf, .doc, .docx, .xls, .xlsx, .ppt, .pptx, .zip, .rar, .tar.gz, tar.bz2.
    • From the user's point-of-view, the attachment opens and runs as normal on their computer. This provides a groundbreaking combination of high security with no loss of usability.
    • Background - Each email attachment is checked by our filters and awarded a trust rating. This can be 'Safe' (the file is on our whitelist), 'Malware' (the file is on our blacklist), or 'Unknown' (the file does not yet have a trust rating).
    • Because unknown files could be malware, we run them in the container on the endpoint while we test them to establish their safety. If the tests find the file is safe then it is released from containment. If the tests find the file is harmful then it is quarantined.
    • You can disable this setting for particular users if required. See 'User Account Management' for more info on this.
    • Detect multiple extension attachments - Files of more than one file type or extensions. For example, 'file_name.doc.exe'. If enabled, CSEG quarantines messages with these types of attachments.
    • Remove multiple extension attachments - If enabled, message is delivered to the recipient without the attachment.
    • Reject emails contains credit card number - If enabled, emails that contain credit card numbers will be rejected. Credit card numbers have a certain structure that CSEG filters can recognize, so emails containing random numbers will not be rejected.
    • Click 'Save' for your settings to take effect.
    • Click 'Reset to default' to undo any changes.
    Our Products
    • Free Antivirus
    • Free Internet Security
    • Website Malware Removal
    • Free Anti-Malware
    • Anti-Spam (Free Trial)
    • Windows Antivirus
    • Antivirus for Windows 7
    • Antivirus for Windows 8
    • Antivirus for Windows 10
    • Antivirus for MAC
    • Antivirus for Linux
    • Free Endpoint Security
    • Free ModSecurity
    • Free RMM
    • Free Website Malware Scanner
    • Free Device Manager for Android
    • Free Demo
    • Network Security
    • Endpoint Protection
    • Antivirus for Android
    • Comodo Antivirus
    • Wordpress Security
    Cheap CDN
    • Bootstrap CDN
    • Semantic UI CDN
    • Jquery CDN
    • CDN Plans
    • CDN
    • Free CDN
    Enterprise
    • Patch Management Software
    • Patch Manager
    • Service Desk
    • Website Down
    • Endpoint Protection Solutions
    • Website Security Check
    • Remote Monitoring and Management
    • Website Security
    • Device Manager
    • ITSM
    • CRM
    • MSP
    • Android Device Manager
    • MDR Services
    • EDR Services
    • Ransomware Prevention
    • Managed IT Support Services
    • EDR
    Free SSL Certificate
    Support Partners Terms and Conditions Privacy Policy

    © Comodo Group, Inc. 2023. All rights reserved.