X-pstnvirus header field, X-pstn-settings header field – Google Message Security for Google Apps Administration Guide User Manual
Page 404

404
Message Security for Google Apps Administration Guide
If a message scores as blatant spam, the BSB disposition of bounce or blackhole
results in a discarded message, and there are no spam-related header fields for
those messages. The BSB score was added to make it clear to someone
evaluating the header that the message did meet the spam score criterion but
failed to meet the BSB score criterion.
X-pstnvirus Header Field
When a virus is detected, the message service inserts the
X-pstnvirus
header
field to show what virus was caught. The format of the field when a virus is
detected by McAfee is:
X-pstnvirus: McAfee_Virus_Name
For further details on one of these viruses, you can search for
McAfee_Virus_Name
at the McAfee Virus Information Library site:
http://vil.nai.com
Messages with the X-pstnvirus header field are not delivered to your users only in
the following cases:
•
Virus disposition is set to Message Header Tagging for the organization that
contains the user. In this case, all viruses will be tagged with the header field
and delivered to your mail server.
•
The administrator (or user, if allowed) delivers the infected or cleaned virus to
the user.
The
X-pstnvirus
field is omitted only when virus protection is not enabled for a
user, or there is no the message service user associated with the recipient’s
address.
X-pstn-settings Header Field
User Settings
The X-pstn-settings line shows the recipient's spam settings.
Important: The X-pstn-settings field is not available in a message that was
delivered to multiple (envelope) recipients. However, if the sending mail server
establishes a separate connection for each recipient, then an individual recipient’s
spam-setting information is displayed in the header field.
The format of this header field is:
X-pstn-settings: Bulk_Filter_Setting (Base_Threshold : Effective
Threshold) category_filters
Example:
X-pstn-settings: 5 (2.0000:8.0000) r p M C