hmLoadTopic({
hmKeywords:"Screening,Screening Spambot Detection,Spambot Detection",
hmTitle:"Spambot Detection",
hmDescription:"Spambot Detection tracks the IP addresses that every SMTP MAIL (return-path) value uses over a given period of time. If the same return-path is used by an inordinate number of...",
hmPrevLink:"security--hijack_detection.html",
hmNextLink:"screening_location-screening.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager &gt; Screening",
hmTitlePath:"Security Menu > Security Manager > Screening > Spambot Detection",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Spambot Detection<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:32.5625rem;height:26.9375rem;border:none\" src=\".\/images\/screening_spambot-detection.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Spambot Detection tracks the IP addresses that every <\/span><span class=\"f_PlainText\">SMTP MAIL<\/span><span class=\"f_BodyText\"> (return-path) value uses over a given period of time. If the same return-path is used by an inordinate number of different IP addresses in a short time, this could indicate a spambot network. When a spambot is detected, the current connection is immediately dropped and the return-path value is optionally<\/span><span class=\"f_BodyText\"> blocked for a length of time you specify &nbsp;You can also optionally<\/span><span class=\"f_BodyText\"> block all the known spambot IP addresses for a designated period.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Enable Spambot Detection<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this box to enabled Spambot detection. It is disabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Max different IPs allowed during time interval<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This is the number of different IP addresses from which a given return-path can connect during the specified time interval.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Time interval (in minutes)<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Specify the time interval (in minutes) to use when attempting to detect spambot networks.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Exempt List<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to open the Spambot Detection<\/span><span class=\"f_ControlIndent\"> exempt list. There you can specify IP addresses, senders, and recipients that are exempt from spambot detection. <\/span><\/p>\n\r<p class=\"p_CenteredHLine\" style=\"border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_CenteredHLine\">&nbsp;<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Block offending return-paths for this many minutes<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Use this option if you wish to block detected spambot return-paths. MDaemon will not accept messages with a blocked return-path for the designated number of minutes. This option is enabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Advanced<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Click this button to open the Spambot Senders File. It displays the return-paths currently<\/span><span class=\"f_ControlIndent2\"> blocked and the number of minutes remaining before they will be removed from the<\/span><span class=\"f_ControlIndent2\"> block list.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Block offending IPs for this many minutes<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Use this option if you wish to block detected spambot IP addresses. MDaemon will not accept messages from a blocked IP address for the designated number of minutes. This option is disabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Advanced<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Click this button to open the Spambot IP File. It displays the IP addresses currently<\/span><span class=\"f_ControlIndent2\"> blocked and the number of minutes remaining before they will be removed from the<\/span><span class=\"f_ControlIndent2\"> block list.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">SMTP response (leave blank for default)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Use this option if you wish to customize the SMTP response to spambots attempting to send messages from a<\/span><span class=\"f_ControlIndent\"> blocked return-path or IP address. MDaemon will return the SMTP response, <\/span><span class=\"f_ControlIndent\">&quot;<\/span><span class=\"f_PlainText\">551 5.5.1 &lt;your custom text&gt;<\/span><span class=\"f_ControlIndent\">&quot;, rather than the default response. Leave it blank to use MDaemon\'s default response.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Do not track connections if they are authenticated<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">By default MDaemon will not track <a href=\"security--smtp_authentication.html\" class=\"topiclink\">authenticated<\/a> sessions for Spambot Detection. Clear this checkbox if you do not wish to exempt authenticated connections.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Do not track connections from trusted IPs<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">By default Spambot Detection will not tack connections from <a href=\"security--trusted_ips.html\" class=\"topiclink\">Trusted IP<\/a> addresses. Clear this checkbox if you do not wish to exempt Trusted IPs.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">&nbsp;<\/span><\/p>\n\r"
})
