Configuring message certification options in SecurityGateway Print

This article explains how to configure SecurityGateway to check the sending address on incoming messages for domain-certification, and how to setup certification of domains for mail sent out from the server.

From the Dashboard, after logging in:

1. Click on Security in the bottom-left corner.
2. Locate the Anti-Spam section
3. Click on Message Certification.

You may then configure the following options.

• Enable certification of inbound messages

  SecurityGateway will check incoming messages against the certification service(s) you have listed, and perform the following two actions on them if the sending domain is listed. By default, this is enabled.

• Host name(s) of certification services that I trust (space separated list)

  This is where you may list any message-certification services that you wish to use to verify incoming mail and certify that it is trusted. SecurityGateway by default has a listing for vbr.emailcertification.org, and you may add more by including them in the field, with spaces in between.

• If the sender is certified... ...exempt the message from spam filtering (SpamAssassin and URIBL)

  This option will cause SecurityGateway to skip the URIBL list check, SpamAssassin check, and DNSBL check on the Received headers, of the message, if they are enabled to do so. This option is selected by default.

• If the sender is certified... ... add x.x points to message score

  This option will add the provided number of points to the message, which by default is -3.0. Make sure that you set a negative number in this field if you change this setting.

Note that the following options are only available by selecting a specific domain in the upper-right corner of this window:

• Insert certification data into outbound messages

  Enabling this will insert information into the header of outgoing messages from this domain ('VBR-Info:') indicating that your domain is certified by the specified signing authority. Note that you must also have a way of validating your domain through SPF, SenderID/PRA, DomainKeys, and/or DKIM.

   

• Host name(s) of certification services that vouch for my messages (space separated list)

  This is where you may list the host names of the certification service that has been used to certify your domain; SecurityGateway comes with a listing for vbr.emailcertification.org by default, as above.