Using message processing rules

A message processing rule (hereinafter also "the rule") is a specific multitude of pairs of addresses of senders and recipients whose email messages are processed by Kaspersky Secure Mail Gateway by applying the same values of settings. For a rule to be assigned to an email message, the addresses of the sender and recipient must be specified in the rule settings.

By default, the application contains the following preset message processing rules:

• WhiteList—Process messages from the white list.
• BlackList—Process messages from the black list.
• Default—Process messages according to settings predefined by Kaspersky Lab.

When processing an email message, Kaspersky Secure Mail Gateway checks each rule for the sender-recipient pair of addresses beginning with the highest-priority rule (1). If no match is found, Kaspersky Secure Mail Gateway checks the pair of addresses of the rule with the next highest priority (2). As soon as it finds the sender-recipient pair of addresses in any rule, the application applies the processing settings configured in that rule to the message.

If none of the rules contains the "sender - recipient" pair of addresses, the message is processed according to the preset settings of the Default rule.

For each rule, you can specify your own settings for processing email messages.

Creating message processing rules

To create a message processing rule:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. Click the Create button in the upper part of the workspace.

   A new message processing rule opens.

3. Select the General rule settings section.
4. In the Rule Name (required) field, enter the name of the new rule.

   The rule must have a unique name in the list of Kaspersky Secure Mail Gateway rules.

5. In the Rule Description field, enter the rule description.
6. In the Rule Mode settings group, select one of the following message processing options:
   • Use the settings of scan modules, if you want the application to process messages according to this rule using the settings of the Anti-Spam, Anti-Phishing, and Anti-Virus engines and content filtering settings configured for this rule.

     The following settings groups are displayed in the lower part of the workspace (if they were hidden previously). You can use them to configure Kaspersky Secure Mail Gateway settings for a rule:

     • Anti-Spam.
     • Anti-Virus.
     • KATA protection.
     • Anti-Phishing.
     • Content Filtering.
     • Notifications.
     • Email Disclaimer.
     • Insecure Message Warning.
     • Mail Sender Authentication.
   • Reject without scanning — if you want the application to reject the message without scanning when processing the message according to this rule.
   • Delete without notifying the sender, if you want the application to delete messages without notifying the sender when processing messages according to this rule.
   • Skip from scanning — if you want the application to deliver messages to recipients without scanning them when processing messages according to this rule.

     The Email Disclaimer section is displayed in the lower part of the workspace, in which you can configure disclaimers for messages processed according to this rule.

7. Click the Create button in the lower part of the workspace.

The rule is created and added to the list of rules in the Rules section.

In order for a rule to be used by Kaspersky Secure Mail Gateway, you have to configure the list of message senders and the list of message recipients for this rule.

You can also create a rule by copying an existing rule or editing its settings.

By default, the rule is assigned the highest priority of all previously created rules. You can change the rule priority level.

In order for the settings you have configured to be used during operation of Kaspersky Secure Mail Gateway, make sure that the rule for which you have configured settings is enabled. By default, the new rule is disabled and not used during operation of the application.

Creating a copy of a message processing rule

To create a copy of a message processing rule:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. Select the check box in the line with the name of the rule that you want to copy.
3. Click the Copy button in the upper part of the workspace.
4. In the General rule settings section, in the Rule Name (required) field, change the rule name.

   The rule must have a unique name in the list of Kaspersky Secure Mail Gateway rules.

5. Click the Create button in the lower part of the workspace.

A copy of the rule is created and added to the list of rules in the Rules section.

You can edit the rule description, rule settings, and Kaspersky Secure Mail Gateway settings for this rule.

By default, the rule is assigned the highest priority of all previously created rules. You can change the rule priority level.

In order for the settings you have configured to be used during operation of Kaspersky Secure Mail Gateway, make sure that the rule for which you have configured settings is enabled. By default, the new rule is disabled and not used during operation of the application.

Configuring lists of message senders and recipients for a rule

In order for a rule to be used by Kaspersky Secure Mail Gateway, you have to configure the lists of message senders and recipients for this rule.

You can configure lists of message senders and recipients as follows:

• Create lists of message senders and recipients. You can add IP addresses of message senders and email addresses and LDAP accounts of message senders and recipients to lists.
• Copy addresses from lists of message senders and recipients to clipboard and paste addresses from clipboard into lists of message senders and recipients.
• Remove addresses from lists of message senders and recipients. You can remove individual addresses from lists, clear the lists of message senders and recipients, and also remove LDAP accounts from the List of senders' LDAP accounts and the List of recipients' LDAP accounts in the process of configuring lists of message senders and recipients.

Adding email addresses

To add email addresses to lists of message senders and recipients:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. In the list of rules, click the name of the rule to open the rule for which you want to manage the list of message senders and recipients.
3. Select the General rule settings section.
4. Select the list to which you want to add email addresses:
   • Senders — if you want to add email addresses to the list of message senders.
   • Recipients — if you want to add email addresses to the list of message recipients.
5. Under the list name, click the button with the icon corresponding to the type of the sender's or recipient's address, and select Email addresses in the context menu of the button.
6. Type the email address in the field to the right of the Email addresses icon.

   The email addresses are entered one at a time. Repeat the process of adding addresses to the list for all email addresses that you are adding.

   You can use the symbols "*" and "?" to create an address mask, and regular expressions beginning with the prefix "reg:".

   Regular expressions are not case-sensitive.

7. Click the Add button on the right of the entry field.

   Once added, the email address appears in the list you have selected with the Email addresses icon.

8. To undo the last action, click the Undo last link under the list you have selected.
9. After adding all email addresses to the list, click the Apply button in the lower part of the workspace.

Changes made to the lists of message senders or recipients are saved in the message processing rule that you are configuring.

In order for the settings you have configured to be used during operation of Kaspersky Secure Mail Gateway, make sure that the rule for which you have configured settings is enabled.

Adding IP addresses

You can add IP addresses only to the list of message senders. IP addresses cannot be added to the list of message recipients.

To add IP addresses to the list of message senders:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. In the list of rules, click the name of the rule to open the rule for which you want to manage the list of message senders and recipients.
3. Select the General rule settings section.
4. In the Senders section, click the button with the icon for the sender address type, and select IP addresses in the context menu of the icon.
5. In the field on the right of the IP addresses icon, enter the IP address of the message sender.

   IP addresses should be entered one at a time. Repeat the process of adding addresses to the list for all IP addresses that you are adding.

   You can enter an IPv4 address (for example: 192.0.0.1 or 192.0.0.0/16), an IPv6 address (for example: 2607:f0d0:1002:51::4), or subnet address in CIDR format (for example: fc00::/7).

6. Click the Add button on the right of the entry field.

   The IP address you have added appears in the list of message senders with the IP addresses icon.

7. To undo the last action, click the Undo last link under the list of message senders.
8. After adding all IP addresses to the list, click the Apply button in the lower part of the workspace.

Changes made to the lists of message senders or recipients are saved in the message processing rule that you are configuring.

In order for the settings you have configured to be used during operation of Kaspersky Secure Mail Gateway, make sure that the rule for which you have configured settings is enabled.

Adding LDAP accounts

To add LDAP accounts to lists of message senders and recipients:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. In the list of rules, click the name of the rule to open the rule for which you want to manage the list of message senders and recipients.
3. Select the General rule settings section.
4. Select the list to which you want to add LDAP accounts:
   • Senders, if you want to add LDAP accounts to the list of message senders.
   • Recipients — if you want to add LDAP accounts to the list of message recipients.
5. Under the list name, click the button with the icon corresponding to the type of the sender's or recipient's address, and select LDAP accounts in the context menu of the button.
6. Click the Find button on the right of the entry field.

   This opens a window depending on the list to which you are adding LDAP accounts:

   • Edit list of senders for rule, if you want to add LDAP accounts to the list of message senders.
   • Edit list of recipients for rule, if you want to add LDAP accounts to the list of message recipients.
7. In the window that opens, in the Sender's LDAP account or Recipient's LDAP account field, enter a search string for searching accounts in the external directory service.
8. Click the Find button on the right of the entry field.

   The list of accounts that have been found is displayed in the field under the Find button.

9. Select the LDAP accounts that you want to add to the list of message senders or recipients.

   You can select several LDAP accounts.

10. Click the Add to list button under the list.

    The selected accounts are displayed in a list:

    • List of senders' LDAP accounts, if you want to add LDAP accounts to the list of message senders.
    • List of senders' LDAP accounts — if you want to add LDAP accounts to the list of message recipients.
11. Click OK in the lower part of the window.
    • Edit list of senders for rule, if you want to add LDAP accounts to the list of message senders.
    • Edit list of recipients for rule, if you want to add LDAP accounts to the list of message recipients.

    The window in which you added LDAP accounts closes.

    The LDAP accounts that you have added appear in the list of addresses with the LDAP accounts icon.

12. To undo the last action, click the Undo last link under the list of addresses.
13. Click the Apply button in the lower part of the workspace.

Changes made to the lists of message senders or recipients are saved in the message processing rule that you are configuring.

In order for the settings you have configured to be used during operation of Kaspersky Secure Mail Gateway, make sure that the rule for which you have configured settings is enabled.

Removing LDAP accounts from the list of LDAP accounts

You can remove LDAP accounts from lists of senders and recipients in message processing rules and also from lists of LDAP accounts in the Edit list of senders for rule and Edit list of recipients for rule windows while configuring lists of message senders and recipients for a rule.

To remove LDAP accounts from lists of LDAP accounts:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. In the list of rules, click the name of the rule to open the rule for which you want to manage the list of message senders and recipients.
3. Select the General rule settings section.
4. Select the list in which you want to manage LDAP accounts:
   • Edit list of recipients for rule—To manage LDAP accounts of message senders.
   • Recipients—To manage LDAP accounts of message recipients.
5. Under the list name, click the button with the icon corresponding to the type of the sender's or recipient's address, and select LDAP accounts in the context menu of the button.
6. Click the Find button on the right of the entry field.

   This opens a window depending on the list in which you are managing LDAP accounts:

   • Edit list of senders for rule—To manage LDAP accounts of message senders.
   • Edit list of recipients for rule—To manage LDAP accounts of message recipients.
7. In the lower part of the window, select the LDAP accounts that you want to remove from the list:
   • List of senders' LDAP accounts, if you are removing LDAP accounts from the list of message senders.
   • List of recipients' LDAP accounts, if you are removing LDAP accounts from the list of message recipients.

   You can select several LDAP accounts.

8. Click the Delete from List button under the list.

   The selected accounts are removed from the selected list.

9. Click OK in the lower part of the window.
   • Edit list of senders for rule, if you are removing LDAP accounts from the list of message senders.
   • Edit list of recipients for rule, if you are removing LDAP accounts from the list of message recipients.

   The window in which you deleted LDAP accounts closes.

   The deleted LDAP accounts are also removed from the list of addresses of message senders or recipients for the rule you selected.

10. To undo the last action, click the Undo last link under the list of addresses.
11. Click the Apply button in the lower part of the workspace.

Changes made to the list of message senders or recipients are saved in the message processing rule that you are configuring.

In order for the settings you have configured to be used during operation of Kaspersky Secure Mail Gateway, make sure that the rule for which you have configured settings is enabled.

Copying and pasting addresses

To copy an address from the list of senders or recipients in a message processing rule:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. In the list of rules, click the name of the rule to open the rule for which you want to manage the list of message senders or recipients.
3. Select the General rule settings section.
4. Select the list from which you want to copy addresses to clipboard:
   • Senders, if you want to copy addresses from the list of message senders.
   • Recipients, if you want to copy addresses from the list of message recipients.
5. Click the Export link under the selected list to open the Export entries to clipboard window.
6. In the Select type list, select the type of addresses that you want to copy:
   • Email addresses, if you want to copy email addresses.
   • IP addresses, if you want to copy IP addresses (only from the list of message senders).
   • LDAP accounts, if you want to copy LDAP accounts.

   A list of addresses of the selected type appears in the field under the list of address types.

7. Select the addresses you want to copy.
8. Copy the addresses to clipboard.
9. In the lower part of the Export entries to clipboard window, click the Cancel button.

   The Export entries to clipboard window closes.

To paste addresses from clipboard to the list of message senders or recipients in a message processing rule:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. In the list of rules, click the name of the rule to open the rule for which you want to manage the list of message senders and recipients.
3. Select the General rule settings section.
4. Select the list into which you want to paste addresses from clipboard:
   • Senders — if you want to paste addresses from clipboard into the list of message senders.
   • Recipients — if you want to paste addresses from clipboard into the list of message recipients.
5. Click the Import link under the selected list to open the Import records from clipboard window.
6. In the Select type list, select the type of addresses that you want to past from clipboard:
   • Email addresses — if you want to paste email addresses.
   • IP addresses — if you want to paste IP addresses (only from the list of message senders).
   • LDAP accounts — if you want to paste LDAP accounts.
7. Paste addresses from clipboard into the field under the list of address types.
8. In the lower part of the Export entries to clipboard window, click the Import button.

   The Import records from clipboard window closes.

   The addresses you have added appear in the list of message senders or recipients with icons corresponding to the types of addresses.

9. To undo the last action, click the Undo last link under the list of message senders or recipients.
10. Click the Apply button in the lower part of the workspace.

Changes made to the lists of message senders or recipients are saved in the message processing rule that you are configuring.

In order for the settings you have configured to be used during operation of Kaspersky Secure Mail Gateway, make sure that the rule for which you have configured settings is enabled.

Deleting addresses

You can remove individual addresses from the lists of senders or recipients or clear the lists of senders and recipients in a message processing rule.

To remove addresses from the list of senders or recipients:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. In the list of rules, click the name of the rule to open the rule for which you want to manage the list of message senders and recipients.
3. Select the General rule settings section.
4. Select the list from which you want to remove addresses:
   • Senders — if you want to remove addresses from the list of message senders.
   • Recipients — if you want to remove addresses from the list of message recipients.
5. In the list, select the address that you want to remove.
6. Click the removal icon on the right of the address that you want to remove.

   The address is removed from the list of message senders or recipients.

7. To undo the last action, click the Undo last link under the list of message senders or recipients.
8. Click the Apply button in the lower part of the workspace.

Changes made to the lists of message senders or recipients are saved in the message processing rule that you are configuring.

To clear the list of senders or recipients:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. In the list of rules, click the name of the rule to open the rule for which you want to manage the list of message senders and recipients.
3. Select the General rule settings section.
4. Select the list from which you want to remove all addresses:
   • Senders — if you want to clear the list of message senders.
   • Recipients — if you want to clear the list of message recipients.
5. Click the link under the selected list to open the action confirmation window:
   • Clear list of senders — if you want to clear the list of message senders.
   • Clear the list of recipients — if you want to clear the list of message recipients.
6. Click the Yes button.

   The action confirmation window closes.

   All addresses are removed from the list of message senders or recipients.

7. To undo the last action, click the Undo last link under the list of message senders or recipients.
8. Click the Apply button in the lower part of the workspace.

Changes made to the lists of message senders or recipients are saved in the message processing rule that you are configuring.

In order for the settings you have configured to be used during operation of Kaspersky Secure Mail Gateway, make sure that the rule for which you have configured settings is enabled.

Deleting message processing rules

To delete message processing rules:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. Select the check box in the lines with the names of one or several rules that you want to delete.
3. Click the Delete button in the upper part of the workspace.

The selected message processing rules are deleted.

Enabling and disabling a message processing rule

To enable or disable a message processing rule:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. Do one of the following:
   • Flip on the toggle switch in the line with the name of the rule that you want to enable.
   • Flip off the toggle switch in the line with the name of the rule that you want to disable.

Changing the message processing rule priority

To change the message processing rule priority:

1. In the main window of the application web interface, open the management console tree and select the Rules section.
2. Select the check box in the line with the name of the rule whose priority you want to change.
3. Click one of the following buttons in the upper part of the workspace:
   • Move Up, if you want to raise the priority of the rule by one level.

     The rule is moved one level up in the list of rules.

     Click the Move Up button as many times as you want to raise the priority of the rule.

   • Move Down, if you want to lower the priority of the rule by one level.

     The rule is moved one level down in the list of rules.

     Click the Move Down button as many times as you want to lower the priority of the rule.