(How) Can I change actions for specific message types?

Under "Incoming - Protection Settings" > "Customize Actions" you have the option to customize the action performed by the filter for specific message types. For example, for messages that fail the SPF check, you can add a rule that specifies that such messages are immediately rejected and not quarantined.

Change an action for a specific message type

The easiest way to change an action is to use the log search. To do this, click on the drop-down menu at the front of the relevant message in the search and select the option "Change actions for messages like this". Now select the desired action in the window that appears and click "Save". You can find the filter's reaction to the different actions below.

Alternatively, you can set a rule for a specific message type like this

1

Log into the admin panel of EuropeanMX and go to "Customise actions" under "Incoming - Protection settings". Now click on "Add" to create a new rule.

2

Now fill in the fields of the rule to set an action on a specific message type.

Order
Here you can specify a place in the order for the rule to prioritize different rules. For example, enter "1" to give the rule the highest priority.
Main class rule (optional)
Enter the value that will be displayed in the log search, e.g. "phish".
Subclass rule (optional)
Allows you to restrict the rule, e.g. "spf".
Extra class rule (optional)
Allows you to further restrict the rule.
The main class, sub class, and extra class contain regular expressions that allow you to match more than one class with a single custom action!
Action
- Permanently reject: The message is permanently rejected and not quarantined.
- Quarantine: The message will be quarantined (550 SMTP response).
- Accept: The message is accepted by the filter.
- Accept and notate spam: The message is accepted by the filter and delivered to the recipient. At the same time, a spam notation is added to the subject.
- Blackhole: The message is deleted without notifying the sender.
- Accept and notate: The message is accepted and delivered to the recipient. At the same time, a notation is added to the subject.
- Temporarily reject: The message is temporarily rejected and not quarantined.
- False accept: the message is quarantined without informing the sender (250 SMTP response).
- Quarantine (hidden): The message is quarantined and can be released. The sender will receive a 550 SMTP response.
Notation
You only need to fill in this field if you use the "Accept and Notate" action. This is the text that will be added to the subject.

3

Click "Save" to complete the rule creation.

Examples for changing an action

These are just examples of how you can deal with a questionable email! You should not blindly transfer them to your system!

1

With this rule all messages marked with "spam" in the main class are permanently rejected

2

With this rule, all messages marked with "spam" in the main class due to a heuristic problem within the EHLO are permanently rejected.

3

This rule quarantines all messages marked with "spam" in the main class due to an invalid recipient without informing the sender (250 SMTP response).