H3C Technologies H3C SecPath F1000-E - Manual (Page 672)

2
• ActiveX blocking: Allows the device to block ActiveX plugin requests to untrusted websites,
protecting networks from being attacked by malicious ActiveX plugins.
• Java applet blocking: Allows the device to block Java applet requests to untrusted websites,
protecting networks from being attacked by malicious Java applets.
SMTP Packet Content Filtering
The SMTP packet content filtering, hereinafter referred to as SMTP filtering, includes these functions:
• Sender filtering: Allows the device to filter sender addresses in SMTP requests, preventing specified
senders from sending e-mails.
• Receiver filtering: Allows the device to filter receiver addresses in SMTP requests, preventing internal
users from sending e-mails to the specified receivers.
• Subject filtering: Allows the device to filter mail subjects in SMTP requests, blocking e-mails that
contain specified keywords in the mail subject.
• Body filtering: Allows the device to filter mail bodies in SMTP requests, blocking e-mails that contain
specified keywords in the mail body.
• Attachment filtering: Allows the device to check the attachment names and contents in SMTP
requests, blocking e-mails that carry attachments with specified names or with specified keywords
in the attachment content.
• Illegal command blocking: Allows the device to block SMTP requests that carry illegal command
words.
NOTE:
Legal command words in terms of content filtering include HELO, EHLO, RSET, QUIT, DATA, NOOP,
HELP, EXPN, TURN, VRFY, SOML, SAML, SEND, MAIL, RCPT, and AUTH.
• Oversize mail blocking: Oversize mail blocking can limit the size of the mails from internal users,
blocking e-mails that are oversize.
Configuring Content Filtering
Configuration Guide
Follow these steps to configure content filtering:
1. Configure filtering keywords and filtering entries
You can configure filtering keywords and filtering entries as needed.