Kaspersky Secure Mail Gateway

Creating message processing rules

To create a message processing rule:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. In the upper part of the workspace, click Create.

   A new message processing rule opens.

3. In the left pane, select the General section.
4. In the Rule name field, type the name of the new rule.

   The rule must have a unique name in the list of Kaspersky Secure Mail Gateway rules.

5. In the Description field, type the rule description.
6. In the Mode settings group, select one of the following message processing options corresponding to criteria of the rule:
   • Use the settings of scan modules to use the settings of Anti-Virus, Anti-Spam, and Anti-Phishing modules as well as Content Filtering settings.

     The left pane displays sections where you can configure modules used by the rule.

   • Reject without scanning to reject messages without scanning them with Anti-Virus, Anti-Spam, or Anti-Phishing modules, or applying Content Filtering settings.
   • Delete without notifying the sender to delete messages without scanning them with Anti-Virus, Anti-Spam, or Anti-Phishing modules, applying Content Filtering settings, or notifying the sender about non-delivery.
   • Skip without scanning to deliver messages without scanning them.
7. If you want to modify the priority of the rule, in the Rule priority settings group, set the position of the rule in the rule table.

   By default, the rule is assigned the highest priority of all previously created rules.

8. Under Sender, specify senders to which the rule must apply:
   • Email
     1. On the Email tab, add email addresses to the list:
        • To specify an address manually, click Add, enter an email address and click . The button is available if the text in the field matches the email address format.

          If necessary, repeat the steps for the rest of addresses.

        • To paste addresses from the clipboard, click Import, type or paste email addresses separated by commas or new lines, then click Import.

        You can use the symbols "*" and "?" to create an address mask, and regular expressions beginning with the prefix "re:".

        Regular expressions are not case-sensitive.

        • If you want to edit a previously added address, click the address in the text box, make the necessary changes in edit mode and click . If necessary, use the search bar.
     2. If you want to delete an address from the list, click to the right of the address. To clear the list, click Delete all.

        Up to 100,000 addresses can be added.

        Kaspersky Secure Mail Gateway will look for the specified email addresses in the SMTP session (value of the MAIL FROM command).

   • IP
     1. Go to the IP tab and add sender IP addresses to the list:
        • To specify an IP address manually, click Add, enter an IP address and click . The button is available if the entered value matches the IP address format.

          If necessary, repeat the steps for the rest of IP addresses.

        • To paste IP addresses from the clipboard, click Import, type or paste IP addresses separated by commas or new lines, then click Import.

        You can enter an IPv4 address (for example: 192.0.0.1), an IPv4 subnet address with a mask (for example: 192.0.0.0/16), an IPv6 address (for example: 2607:f0d0:1002:51::4), or IPv6 subnet address with a mask (for example: fc00::/7).

     2. If you want to edit a previously added IP address, click it in the list, make the necessary changes in edit mode and click . If necessary, use the search bar.
     3. If you want to delete an IP address from the personal list, click to the right of the address. To clear the list, click Delete all.

        Up to 100,000 IP addresses can be added.

   • LDAP: DN
     1. Go to the LDAP: DN tab and add LDAP accounts to the list:
        • To specify an account manually, click Add, enter a value and click . When entering the value, a suggestion is displayed, listing accounts from the LDAP cache that contain the entered characters.

          The suggestion for contact accounts is displayed if the fetching of contact emails is enabled in LDAP server connection settings.

          If the name of the LDAP account includes a special character, use a backslash ("\") to escape the special character. Otherwise suggestion for the account is not displayed. For example, the if the name of the account is exa,mple, enter it as exa\,mple. For more information and a list of characters that must be escaped, see Microsoft documentation.

          If necessary, repeat the steps for the rest of LDAP accounts.

        • To paste an LDAP account from the clipboard, click Import, type or paste accounts separated by commas or new lines, then click Import.
     2. If you want to edit a previously added account, click it in the list, make the necessary changes in edit mode and click . If necessary, use the search bar.
     3. If you want to delete an account from the list, click to the right of the LDAP account. To clear the list, click Delete all.

     The LDAP DN is matched to email addresses from the SMTP session (value of the MAIL FROM command).

   To apply the rule, you must specify at least one sender.

9. Under Recipient, specify recipients to which the rule must apply.
   • Email
     1. On the Email tab, add email addresses to the list:
        • To specify an address manually, click Add, enter an email address and click . The button is available if the text in the field matches the email address format.

          If necessary, repeat the steps for the rest of addresses.

        • To paste addresses from the clipboard, click Import, type or paste email addresses separated by commas or new lines, then click Import.

        You can use the symbols "*" and "?" to create an address mask, and regular expressions beginning with the prefix "re:".

        Regular expressions are not case-sensitive.

        • If you want to edit a previously added address, click the address in the text box, make the necessary changes in edit mode and click . If necessary, use the search bar.
     2. If you want to delete an address from the list, click to the right of the address. To clear the list, click Delete all.

        Up to 100,000 addresses can be added.

        Kaspersky Secure Mail Gateway will look for the specified email addresses in the SMTP session (values of the RCPT TO command).

   • LDAP: DN
     1. Go to the LDAP: DN tab and add LDAP accounts to the list:
        • To specify an account manually, click Add, enter a value and click . When entering the value, a suggestion is displayed, listing accounts from the LDAP cache that contain the entered characters.

          The suggestion for contact accounts is displayed if the fetching of contact emails is enabled in LDAP server connection settings.

          If the name of the LDAP account includes a special character, use a backslash ("\") to escape the special character. Otherwise suggestion for the account is not displayed. For example, the if the name of the account is exa,mple, enter it as exa\,mple. For more information and a list of characters that must be escaped, see Microsoft documentation.

          If necessary, repeat the steps for the rest of LDAP accounts.

        • To paste an LDAP account from the clipboard, click Import, type or paste accounts separated by commas or new lines, then click Import.
     2. If you want to edit a previously added account, click it in the list, make the necessary changes in edit mode and click . If necessary, use the search bar.
     3. If you want to delete an account from the list, click to the right of the LDAP account. To clear the list, click Delete all.

     The LDAP DN is matched to email addresses from the SMTP session (values of the RCPT TO command).

   To apply the rule, you must specify at least one recipient.

10. Click Save.

    If at least one list item under Sender and Recipient is specified in an unacceptable format, the rule cannot be saved. Fix all values highlighted with a red background and repeat the save operation.

The rule is created and added to the rule table in the Rules section.

For modified settings to be applied by Kaspersky Secure Mail Gateway, the rule must be enabled. By default, the new rule is disabled and not used by the application.