Configuring the Anti-Phishing scan settings for a rule

To configure the Anti-Phishing scan message processing settings:

1. Export rule settings to an ХML file using the following command:

   # /opt/kaspersky/klms/bin/klms-control \

   --get-rule-settings <rule ID> -f <rule settings file name> or

   --get-rule-settings <rule name> -n -f <rule settings file name>

   The <rule name> should be enclosed in double quotes if it contains blanks.

2. Open the rule settings ХML file for editing.
3. Specify the action you want the application to take on messages. To do so, in the <apScanSettings> section specify the value Skip, DeleteMessage or Reject for the <phishingAction> setting if the message has status as Phishing or Malicious link.

   The default action is Skip.

4. If you selected the DeleteMessage action at the previous step of the procedure, you can configure the application to move a copy of the message found to contain a phishing threat to Backup before deleting the message. To do so, in the <apScanSettings> section, specify the value 1 for the <backupPhishing> setting.
5. If you selected Skip at Step 3 of the sequence, you can edit the text of the tag added to the Subject field of the message. To do so, in the <apScanSettings> section, specify the text of the stamp as the value for the following settings:
   • <phishingMark>, if the message has Phishing status;
   • <maliciousMark>, if the message has Malicious link status.
6. Save the changes made.
7. To import rule settings from an ХML file, use the following command:

   # /opt/kaspersky/klms/bin/klms-control \

   --set-rule-settings <rule ID> -f <rule settings file name> or

   --set-rule-settings <rule name> -n -f <rule settings file name>

   The <rule name> should be enclosed in double quotes if it contains blanks.