Jump to content

M.K.

ESET Staff
  • Content Count

    17
  • Joined

  • Last visited

Kudos

  1. Upvote
    M.K. received kudos from Peter Randziak in How to deal with display name spoofing, when contains right mailadress also in reply, but "name@abc.com" is different   
    Hi,
    have you tried using custom rules with the combinations of conditions
    From header - address
    From header - display name?
    You can also have all macro-enabled office documents quarantined, using the Attachment type condition.
  2. Upvote
    M.K. received kudos from Mike_Kintaru in Eset Mail Security   
    Hi,
    also please note that ESET Mail Security for Exchange can also be used to scan Exchange Online mailboxes with on-demand scan in case of hybrid deployments (on-premise + cloud). Mail transport in hybrid deployments is scanned only if emails are routed first to on-premise server and then to cloud.
    Matej
  3. Upvote
    M.K. received kudos from HenrysCat in DNSBL vs RBL Mail security   
    Hi,
    RBL servers are queried with IP addresses extracted from message headers, DNSBL server are queried with domains and IP addresses extracted from the message body.
    So the answer depends on the type of the BL, i.e. Spamhaus could be in both, Spamcop collects only IP's so it's probably sufficient to put it only in Additional RBL servers list, etc..
    Best regards,
    Matej
  4. Upvote
    M.K. received kudos from Nightowl in Remove any macro in Microsoft Office documents   
    Hi,
    a quick update to this older thread.
    With the upcoming update of the Archive support module (v1303, currently on pre-release servers) it should be now possible to remove macros from office documents in incoming emails, even in previously released Mail security products.
    If you define a custom rule with Attachment type condition, select "Office files/Generic OLE2 Compound Document", and choose Quarantine attachment (or Delete attachment) as an action, Office documents will be delivered without any macros.
    Note: you can of course combine additional conditions in the rule to target it to specific groups or types of emails.
    Matej
  5. Upvote
    M.K. received kudos from Peter Randziak in Remove any macro in Microsoft Office documents   
    Hi,
    a quick update to this older thread.
    With the upcoming update of the Archive support module (v1303, currently on pre-release servers) it should be now possible to remove macros from office documents in incoming emails, even in previously released Mail security products.
    If you define a custom rule with Attachment type condition, select "Office files/Generic OLE2 Compound Document", and choose Quarantine attachment (or Delete attachment) as an action, Office documents will be delivered without any macros.
    Note: you can of course combine additional conditions in the rule to target it to specific groups or types of emails.
    Matej
  6. Upvote
    M.K. received kudos from JPVG in ESET Mail Security blocking GMail??   
    Hi,
    from your description it seems that the email has been marked as a spam because of it's content ("Rule system classified mail as SPAM"), despite the fact that it came from a trusted source ("IP (209.85.208.175) isn't found on cloud black list").
    Ad. "Any ideas why this software is blocking trusted email?":
    In order to answer this, please open a ticket with our support and provide them with sample(s) of mis-classified email(s).
    Ad. "Does this software not send a quarantine report to end users?":
    Yes it can, please refer here (https://help.eset.com/emsx/7.1/en-US/idh_scheduler_task_qreports.html).
    Matej
  7. Upvote
    M.K. received kudos from Nightowl in Remove any macro in Microsoft Office documents   
    Hi Tom,
    in Mail Security there is an option to define a custom rule to move all emails containing macro-enabled office documents to quarantine. You need to define an Attachment type condition and mark "Microsoft Office Macro-Enabled Document (97-2003)", "Microsoft Word Macro-Enabled (2007+) (*docm, *dotm)", etc...
    Matej
×
×
  • Create New...