Jump to:navigation, search
Wiki

Mail Security section Mailsecurity

From Securepoint Wiki





























In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
Diese Seite wird auf folgenden Seiten eingebunden






















































| Enabling this prevents SPF checks from failing incorrectly after passing through Mail Security by performing an SRS (Sender Rewrite Sheme). }}





















































































































































































































{{var | neu--Routen vereinfacht | Das [[#Neue_Route_erstellen | Menü zum Erstellen neuer Routen}} wurde vereinfacht | }}
















Overview of the configuration in the Mailsecurity menu section of the Securepoint Mail security

Last adaptation to the version: 2025.12

New:
  • BetaOnly activated for NFR licences:
notempty
This article refers to a Beta version

2025.04

Access: mailsecurity.securepoint.de mail.security

Beta Beta-Version - nur für NFR Lizenzen freigeschaltet

Overview

Caption Value Description.
Menu item overview
Mail reports Daily Weekly Monthly Download button for the individual mail reports
E-Mail Count
(also in the Dashboard)		      Number of emails processed in one day
Virus count/ Number of detected viruses
(also in the Dashboard)		      Number of emails marked as viruses
Detected by ATP
(also in the Dashboard)		         Number of emails identified as threats by ATP
Spam count/ Number of spam emails
(also in the Dashboard)		      Number of spam emails in one day
Delivered Number of delivered emails
SPAM (by user) Number of emails manually marked as spam by the user
HAM (by user) Number of emails manually marked as HARM/not spam
Check Records
(also in the Dashboard)		 mx.ttt-point.de Affected domain
MX MX record correctly configured
MX record is not set to the Securepoint Cyber Defence Cloud (mx.mymailwall.com)
MY record is not set
SPF SPF record correctly configured
The SPF entry does not contain a reference to the Securepoint Cyber Defense Cloud (include:mymailwall.com).
Incorrect value of “mx.mymailwall.com” corrected to “include:mymailwall.com”
SPF record is not set
DKIM DKIM record correctly configured
DKIM record is not set
DMARCnotempty
New as of 12.2025
DMARC record correctly configured
DMARC record is not set
Check Email server
(also in the Dashboard)		 203.113.0.113 The mail server can be reached
203.113.0.113 The mail server cannot be reached

Domains

Add domain

Menü mail.security Domains Schaltfläche  Domäne hinzufügen

To use a domain for mail security, it must first be added here. This requires verification using a TXT entry
This entry does not change the functionality of your domain; it is only required for verification purposes.
. This entry must be added in the domain configuration of the provider with whom the domain is registered. The domain can then be added here.
Caption Value Description
Add domain
Domain mx.ttt-point.de Domain to be added
Value of the TXT entry spcheck=*** Organization-wide TXT entry for verification
Copy to clipboard

Overview

All added domains can be viewed under mail.security Domains .
Domain # 12345 Unique ID of the domain
Domain overview
Domain mx.ttt-point.de Value of the domain
Actions Delete Delete domain from Mail Security
Actions Domain Domain # MX SPF etc.… Blendet die verschiedenen Spalten in der Übersicht ein oder aus
MX SPF DKIM DMARC
Anzeige der DNS-Status wie im Dashboard und in der mail.security Overview

Inbound

Create new route

A new route can be created in then menu mail.security Inbound by using the button  Create Route

Route

Route
Caption Value Description
notempty
Menü vereinfacht
Menu item Inbound create new route
Name of the set (required) TTT-Point Inbound Name des Sets
Bei Auswahl aus dem Dropdownmenü wird die Route einem bestehendem Set hinzugefügt.
Wird ein neuer Name eingegeben, muss die Option _Create "Name des Sets_" angeklickt werden, damit ein neues Set angelegt wird.
Route description     Description/ Name of the route
Default Mailbox domain (required) mx.ttt-point.de Mail domain to be routed through Mail Security
  • The domain must first be added to Mailsecurity added.

    • Using the button, domains can be removed, and with the  Add domain button, further domains can be added
    Target server (required) 203.113.0.113 Address of the target server of your own mail server to ensure that emails will not get lostnotempty
    This address must be correct, otherwise emails will get lost!

    Using the button, target servers can be removed, and with the  Add target server button, additional target servers can be added.
    Random fallback server
    only if multiple target servers are used    		 If the first listed server cannot be reached, fallback servers will be used. If the random fallback server option is enabled, the other servers will be used equally , otherwise, the next server in the list will be used.

    Erweiterte Optionen

    Erweiterte Optionen
    Activated
    		The route is deactivated by
    Erweiterte Optionen
    Greylisting When Securepoint mail.security greylists a message, it responds to the sending mail server with a temporary rejection message, prompting the sender to try again.

    Upon a retry with the same email data combination, the email is accepted. Whether and when the retry occurs depends soley on the sender.

    enable SPF-check Domains sending via Securepoint mail.security are checked to see if they have a SPF record, and if so, whether it includes: mymailwall.com
    Target host performs an SPF check Die Aktivierung verhindert, dass SPF Prüfungen nach der Mail Security fälschlicherweise fehlschlagen, indem ein SRS (Sender Rewrite Sheme) durchgeführt wird.
    Ignore SPF softfail The SPF-TXT record starts with the SPF version indicator, followed by all whitelisted IP addresses authorized to send emails on behalf of the domain, and ends with an all tag. If this tag is set to ~all (SoftFail), it means that emails from servers/IP addresses not listed in the SPF record should be accepted but marked. This behavior is ignored when this option is enabled.
    Hide SMTP hops Enabling this replaces previous hops in the header, instead of appending the own header
    Enforce inbound TLS When enabled, incoming emails must be secured via TLS
    Enforce outbound TLS notempty
    New as of 12.2025
    		 When enabled, outgoing emails must be secured via TLS
    Domain-specific TLS can be enforced in the settings

    Edit sets

    Routes
    Routes
    Caption Value Description
    Menu item: Inbound tab routes
    Set nach Name oder ID durchsuchen notempty
    New as of 12.2025
    		 Suche
     12345 notempty
    New as of 12.2025
    		 Kopiert Set Name und ID in die Zwischenablage
    Route # 12345 Distinct route ID
    Description
    Number of emails (last week) 0 Number of emails processed in the last week
    Mailboxen Konfigurieren-[n]
    		Number of monitored mailboxes, along with a button to open the Mailbox overview
    Target server 203.113.0.113 Adress of the target server (email server)
    Domains mx.ttt-point.de Associated domains, such as MX-Record domain
    Actions Edit the route
    This is the same dialog as for Creating a new route.
    Delete the route
    Inbound - Mailboxen
    Using the button  1  in the Mailboxes column, the following overview can be accessed.
    Mailbox test
    Menu item: Inbound routes tab button  1  (Mailboxes column)
    Source domain mx.ttt-point.de Source domain of the mailbox
    Daily
    Actions Edit the mailbox
    Delete the mailbox
    Spam-Report Default Settings
    Default Settings
    Spam-Advicenotempty
    New as of 04.2025
    		 Daily Default value for the spam report for mailboxes in this route
    Dropdown menu with possible default values
    No delivery No Spam Notification is Delivered
    Twice Daily A Spam Notification is delivered twice a day
    Daily A Spam Notification is delivered once per day
    Weekly A Spam Notification is delivered once per week
    Default The setting Default (XY) adopts the predefined value from the Default Settings

    Changes only affect new mailboxes and those with the value Default (xy)

    Add new mailbox
     Add new mailbox
    Email homer@ttt-point.de E-Mail-Adresse der Mailbox
    Add mailbox
    Spam Notification Default (xy) Delivery Frequency of the Spam Notification
    The setting Default (XY) adopts the predefined value from the Default Settings
  • Subsequent changes will be adopted
    • No delivery No Spam Notification is Delivered
    Twice Daily A Spam Notification is delivered twice a day
    Daily A Spam Notification is delivered once per day
    Weekly A Spam Notification is delivered once per week
    Default The setting Default (XY) adopts the predefined value from the Default Settings
    Mailboxen importieren
    Mailboxen importieren
    Mailboxen Per Drag and Drop können mehrere E-Mail-Adressen als Mailboxen eingerichtet werden
    • Import im Excel-Format (xlsx-Datei) oder als CSV
    • Es kann eine Beispiel Datei herunter geladen werden
    • Es handelt sich um eine einfache Liste mit einer E-Mail-Adresse je Zeile
    Spam-Advice Select Auswahl der Häufigkeit des Spam-Reports. Gilt für alle Mailboxen, die mit diesem Import angelegt werden
    Bulk change spam report
    Update selected
    Spam-Advice Select Allows changing the frequency of the spam report for all selected mailboxes at once
    Selection for multiple mailboxes at once
    Settings - General
    Settings - General
    Description TTT-Point Inbound
    Incoming - General Settings
    Disclaimer    When enabled, a disclaimer is added to every email passing through the Mail Security Relay.
    Disclaimer Text     Text of the Disclaimer
    Disclaimer Position At the Beginning of the Email
    At the End of the Email Default    		 Position of the Disclaimer in the email
    Settings - Virus Filter
    Settings - Virus Filter
    Use virus filter    Virus filter is always activated
    Incoming - Virus Filter Settings
    Action for infected email … Action, if the email is detected as infected
    Delete virus Remove the infected part of an attachment (e.g., in case of a file infector) or, as a fallback, delete the entire attachment and then deliver the email
    Delete only the attachment Delete the infected attachment and then deliver the email
    Block the email Do not deliver the email
    Executable file is a virus    All emails with executable files in attachments are classified as infected.
    If the file is directly attached, not only the file extension is checked, but it is analyzed to detect renamed files as well. If files are contained in a password-protected archive, they are only identified based on their file extension.
    Executable files include all PE files (e.g.: .acm, .ax, .cpl, .dll, .drv, .efi, .exe, .mui, .ocx, .scr, .sys, .tsp)
    Encrypted archive is a virus    All emails with password-protected archives as attachments are classified as infected when activated   
    Auto Open exec-Makros als Virus behandeln notempty
    New as of 12.2025
    		    Bei Deaktivierung    werden Auto Open Exec-Makros nicht als Virus behandelt
    Use quarantine mailboxes    Every virus detected by Securepoint mail.security is sent to the quarantine mailbox.

    The virus file is placed in a password protected archive, with the password provided in the email. Additionally, the virus file is modified to prevent accidental execution.

    Mailbox address quarantine@ttt-point.de Infected emails are redirected to this mailbox
    Settings - Attachment Filter
    Settings - Attachment Filter
    Use Attachment Filter    Enables the attachment filter
    Incoming - Atachment Filter Settings
    Quarantine Mailbox     These emails will be redirected to this mailbox when the quarantine function is used
    Content Block Text     This text is displayed when a file is detected by the filter
    Max. email size  0 MB  Maximum allowed size of an email. 0 MB means, no maximum size is set
    Neue Anhang Filter Regel hinzufügen  Add a new Rule Add a new attachment filter rule
    Import rules from a file Import rules from a file
    Export rules Export rules as CSV or Excel table
     Add a new Rule
    Create new file type filter rule
    File type any Specifications of file type
    Name match/ Extension *.exe A match query for the file name
    Sender check * A match query for the sender's email address (*for all email addresses)
    Actions Allow The email will be delivered normally
    Forward The email will only be delivered to the quarantine mailbox
    Block The email will not be delivered
    Comment Redirect all .exe files A short (maximum 280 symbols) description of the rule
    Settings - HTML Filter
    Settings - HTML Filter
    Activate HTML filters    Activate HTML filters
    Incoming - HTML filter settings
    HTML Elements Deletes selected HTML elements from the emails before they are delivered
    Delete HTML part Deletes all HTML elements from the emails
    Delete Applet tag Deletes all Applet elements from the emails
    Delete IFrame tag Deletes all IFrame elements of the emails
    Delete Object tag Deletes all object elements from the emails
    Scripts Deletes selected script elements from the emails
    Delete all scripts Delete all script elements from the emails
    Delete JavaScript Deletes all JavaScript elements from the emails
    Delete VB scripts Deletes all VB script elements from the emails
    Delete ActiveX Deletes all ActiveX elements from the emails
    Removing Notify Request Removes Notify Requests
    Convert TNEF(winmail.dat) TNEF-format content is decoded and replaced to prevent malware.
    Advanced URL Defense For maximum security, additional security checks of the target URL are performed, where the websites are scanned for phishing characteristics - once when the email is received and again each time the URL is clicked. This way, delayed attack tactics are also detected and countered.
    Settings - Spam Filter
    Settings - Spam Filter
    Use SPAM filter    Activates the SPAM filter
    Incoming - Spam filter Settings
    Filter tolerance Potential Spam: 3
    SPAM: 7    		 Configuration of when an email is classified as potential Spam or Spam, based on the Spam core. These scores can also be viewed for each email under mail.security Emails
    When identified as potential Spam Mark email Action to take when the email is identified as potential Spam
    Do not modify the subject
    Only when mark email    		    When activated   . the subject of an email is not modified by Mailsecurity
    If identified as SPAM Redirect email Action to take when an email is identified as Spam
    Redirect to
    Only when Redirect emails    		 spam@ttt-point.de Mailbox where emails are identified as Spam should be redirected
    Settings - Spam rules
    Settings - Spam rules
    Add a new Spam Rule  Add a new Rule Create a new Spam Rule
    Incoming - Spam Filter Rule Settings
    Import rules from a file Import spam rules from a file
    Export rules Export Spam rules as CSV or Excel table
    Actions Opens the same dialog as when creating a rule, to update the rule
    Deletes the rule
     Add a new Rule
    Email section Subject This defines what the filter will focus on
    Sender This refers to the envelope sender or the actual sender of the email, which does not necessarily match the sender indetified in the email client.
    Recipient This refers to the envelope sender or the actual sender of the email, which does not necessarily match the sender indetified in the email client.
    Subject This refers to the envelope sender or the actual sender of the email, which does not necessarily match the sender indetified in the email client.
    Content This refers to the envelope sender or the actual sender of the email, which does not necessarily match the sender indetified in the email client.
    Content *free* Specifies the string used to search the sender, recipient, subject, or body. Note that the search is only for the string itself, without considering what comes before or after it. For example, if searching for the text „count“, the word „accounting“ will also be included.
    Type Potential spam This defines what happens to an email when it is selected by the filter.
    Normal email This email is not treated specically and is delivered normally.
    Potential spam The email is treated as potential spam; for example, ******SPAM***** is added to the subject line.
    Spam This email is treated as potential spam and is thereforce generally not delivered
    Comment Mark email with "free" in subject as possible spam A brief description of the rule (maximum 280 characters)

    Outgoing

    Create new route

    A new route can be created in then menu mail.security Inbound by using the button  Create Route

    Route

    Route
    Caption Value Description
    Menu item outgoing, create a new route
    Activated
    		   The route is deactivated by notempty
    Create new Set Default Creates a new set for the route
    Add to existing Adds the route to an existing set
    Description TTT-Point Outgoing
    Route description     Description/ Name of the route
    Default Here, the IP or subnet must be specified from which outgoing emails are allowed to be accepted.
    Source-IP 203.113.0.113 IP Address from which emails are sent to the Mail Security Server
    Source Mask 255.255.255.255 IP mask used to define a range
    SMTP Authentication Authentication via SMTP
    Password ●●●●●●●●●●●●● Password for the SMTP authetication
    Relay Mail Security serves as the Smarthost for the Sender in the outgoing route.
  • This option is commonly used
    • Relay mx.ttt-point.de Domain of the respective Relay
    Verify sender Mailbox    Outgoing user validation (Queries the receiving mail server to check if the sender exists)
    Destination type MX This email is sent to the recipients domain
    Direct The email is sent to the specified destination server
    Target protocol ESMTP_TLSOPT (Standard) Protocol used to process the emails
    SMTP Processing the email with the SMTP protocol
    ESMTP Processing of the email using the ESMTP (Extended SMTP) protocol
    LMTP Processing of the email using the LMTP protocol (email traffic limited to within a local organization)
    ESMTP_TLS Processing the email with the ESMTP (Extended SMTP) protocol and TLS
    ESMTP_TLSOPT (Standard) Processing the email with the ESMTP (extended SMTP) protocol and otional TLS
    Hide server When activated, no header entry is added by Mail Security
    Allow bounce Allows a bounce of the email
    Hide hops The activation replaces previous hops in the header instead of appending the header to include its own

    Edit sets

    Routes
    Routes
    Caption Value Description
    Menu points: outgoing - routes
    Route # 12345 Distinct route ID
    Description
    Number of emails (last week) 0 Number of emails processed in the last week
    IP address 203.113.0.113 IP Address from which emails are sent to the Mail Security Server
    Actions Edit the route
    This is the same dialog as used for creating a route.
    Delete the route
    Settings - General
    Settings - General
    Description TTT-Point Outgoing
    Menu item: outgoing - general settings
    Disclaimer    When enabled, a disclaimer is added to every email passing through the Mail Security Relay.
    Disclaimer Text     Text of the Disclaimer
    Disclaimer Position At the Beginning of the Email
    At the End of the Email Default    		 Position of the Disclaimer in the email
    Settings - Virus Filter
    Settings - Virus Filter
    Use virus filter    Virus filter is always activated
    Menu Item outgoing - Virus Filter Settings
    Action for infected email … Action, if the email is detected as infected
    Delete virus Remove the infected part of an attachment (e.g., in case of a file infector) or, as a fallback, delete the entire attachment and then deliver the email
    Delete only the attachment Delete the infected attachment and then deliver the email
    Block the email Do not deliver the email
    Executable file is a virus    All emails with executable files in attachments are classified as infected.
    If the file is directly attached, not only the file extension is checked, but it is analyzed to detect renamed files as well. If files are contained in a password-protected archive, they are only identified based on their file extension.
    Executable files include all PE files (e.g.: .acm, .ax, .cpl, .dll, .drv, .efi, .exe, .mui, .ocx, .scr, .sys, .tsp)
    Encrypted archive is a virus    All emails with password-protected archives as attachments are classified as infected when activated   
    Auto Open exec-Makros als Virus behandeln notempty
    New as of 12.2025
    		    Bei Deaktivierung    werden Auto Open Exec-Makros nicht als Virus behandelt
    Use quarantine mailboxes    Every virus detected by Securepoint mail.security is sent to the quarantine mailbox.

    The virus file is placed in a password protected archive, with the password provided in the email. Additionally, the virus file is modified to prevent accidental execution.

    Mailbox address quarantine@ttt-point.de Infected emails are redirected to this mailbox
    Warn recipient
    Except when action: Block email    		    When enabled, a notification text is displayed to the recipient
    Notification text
    Only when Notify Recipient is enabled.    		 This email contained a virus. It was deleted before delivery. This notification is displayed when a virus is detected
    Settings - Attachment Filter
    Settings - Attachment Filter
    Use Attachment Filter    Enables the attachment filter
    Menu item Outgoing - Attachment Filter Settings
    Quarantine Mailbox     These emails will be redirected to this mailbox when the quarantine function is used
    Content Block Text     This text is displayed when a file is detected by the filter
    Max. email size  0 MB  Maximum allowed size of an email. 0 MB means, no maximum size is set
    Neue Anhang Filter Regel hinzufügen  Add a new Rule Add a new attachment filter rule
    Import rules from a file Import rules from a file
    Export rules Export rules as CSV or Excel table
     Add a new Rule
    Create new file type filter rule
    File type any Specifications of file type
    Name match/ Extension *.exe A match query for the file name
    Sender check * A match query for the sender's email address (*for all email addresses)
    Actions Allow The email will be delivered normally
    Forward The email will only be delivered to the quarantine mailbox
    Block The email will not be delivered
    Comment Redirect all .exe files A short (maximum 280 symbols) description of the rule
    Settings - HTML Filter
    Settings - HTML Filter
    Activate HTML filters    Activate HTML filters
    Menu item Outgoing - Attachment Filter Settings
    HTML Elements Deletes selected HTML elements from the emails before they are delivered
    Delete HTML part Deletes all HTML elements from the emails
    Delete Applet tag Deletes all Applet elements from the emails
    Delete IFrame tag Deletes all IFrame elements of the emails
    Delete Object tag Deletes all object elements from the emails
    Scripts Deletes selected script elements from the emails
    Delete all scripts Delete all script elements from the emails
    Delete JavaScript Deletes all JavaScript elements from the emails
    Delete VB scripts Deletes all VB script elements from the emails
    Delete ActiveX Deletes all ActiveX elements from the emails
    Removing Notify Request Removes Notify Requests
    Convert TNEF(winmail.dat) TNEF-format content is decoded and replaced to prevent malware.
    Advanced URL Defense For maximum security, additional security checks of the target URL are performed, where the websites are scanned for phishing characteristics - once when the email is received and again each time the URL is clicked. This way, delayed attack tactics are also detected and countered.

    Mailboxen

    Caption Value Description
    Menu point Mailboxes
    Route # 12345 ID of the route through which the mailbox operates
    Mailbox test2@mx.ttt-point.de Mailbox name (the email address)
    Type inbound Mailbox type (inbound/outbound)
    Last used 2024-08-16 12:41:31 The time when the mailbox was last used
  • If a mailbox has not been used for 30 days, it will be removed from the list.

    • Emails

    Reiter E-Mails

    E-Mails
    Here, all non-blocked emails are listed, including information about the filtering. Additionally, emails with failed deliveres can be resent.
    Caption Value Description
    Menu point emails Tab emails
    MailID 12345678 ID of the email
    S/MIME status Status of the encryption/signatur via S/MIME
    Date Recived 2024-08-07 10:46:21 Time when the email was received by the mail server
    From spam@ttt-point.de Sender's email address
    To admin@ttt-point.de Recipient's email address
    Subject ‒电‒132‒02 25‒16 68‒ Subject of the email
    Email size 1,13 kB File size of the email
    Attachments 0 Number of attachments received with the email
    Spam type SPAM Spam classification of the email (SPAM, POTENTIAL SPAM, Regular)
    Infected email Not infected Infection status of the email (not infected, infected)
    Markings Delivery failure In case of non-delivery, marks are added to the emails
    Delivery failure The delivery to the destination server has failed
    Rejected The email was rejected due to spam/ virus/ attachment.
    Spam points 12,5 Number ob spam points (The higher, the more likely to be spam)
    Actions Resend Resend the emails
    A resend is possible as long as the email is retained. At a minimum, emails are retained for 14 days, with a maximum retenation of 30 days. Regardless of the rule applied to the email.

    Reiter Blockierte E-Mails

    Blockierte E-Mails
    Here, all blocked emails are listed along with some information.
    Date Recived 2024-08-07T08:4... Time when the email was received by the mail server
    Menu item emails Tab Blocked emails
    Source IP 203.113.0.113 IP address from which the email was sent
    From virus@ttt-point.de Sender's email address
    To admin@ttt-point.de Recipient's email address
    Subject ‒电‒132‒02 25‒16 6... Subject of the email
    Message Type GREYLISTED Email classification (GREYLISTED, SPF)
    Message Text no ptr (fqdn) Reason for blocking the email

    S/MIME

    In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
    Diese Seite wird auf folgenden Seiten eingebunden




































    Caption Value Description
    Menu item S/MIME
    Mailboxes      Number of created mailboxes
    Licenses      Number of booked S/MIME licences
    Active      Number of active S/MIME licences
    notempty
    New
    		 Aktualisiert die Anzeige
    Activate
    		Wurden mehrere inaktive Mailboxen mit einer Checkbox ausgewählt, kann für diese gesammelt SMIME aktiviert werden
    Deactivate
    		Wurden mehrere aktive Mailboxen mit einer Checkbox ausgewählt, kann für diese gesammelt SMIME deaktiviert werden
    The table shows created mailboxes under mail.security Inbound 
    (Instructions for creation)
    Certificate ID
    only when active    		 123456 ID of the S/MIME licenses
    Mailbox test2 Name of the Mailbox
    Domain mx.ttt-point.de Domain of the mailbox
    S/MIME Active S/MIME status (inactive/ activating/ active)
    Actions Activate
    only when inactive    		 Activates S/MIME for the respective mailbox, alternatively, multiple mailboxes can be selected using the checkboxes and collectively activated via the Activate button above the table.
    Upload
    only when inactive    		 Activates S/MIME with an uploaded certificate
    Deactivate
    only when active    		 Deactivate S/MIME for the particular Mailbox. Alternatively, multiple mailboxes can be selected using the checkboxes and collectively deactivated via deactivate in the table.
    Speichern
    		Mail Security Zertifikate der eigenen Mailboxen können heruntergeladen werden um sie zu verteilen

    In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
    Diese Seite wird auf folgenden Seiten eingebunden

























    Encryption

    mail.security S/MIME Encryption
    Caption Value Description
    Overview of Encryption Rules
    Priority 2 Rules are prioritized, where 1 has the highest priority. New rules are created with the highest priority.

    The priority can be adjusted using the arrows next to the encryption rule.

    Managed Mailbox/Domain ttt-point.de A mailbox managed by Securepoint mail.security within this organization.
    External Mailbox/Domain ttt-point.de A mailbox outside of this organization, to which emails are sent or received.
    Incoming Always decrypt Encrypted emails Rules for incoming emails
    Starting from Sign only Rules for outgoing emails
    Actions Edit Encryption rule
    Delete encryption Rule
    Create new Rule
    Managed Mailbox/Domain ttt-point.deAny A mailbox managed by Securepoint mail.security within this organization.
    A maximum of 20 entries can be selected, seperated by commas. Or all entries with All.
    Create new Encryption Rule
    External Mailbox/Domain anyAny A mailbox outside of this organization, to which emails are sent or received.
    A maximum of 20 entries can be selected, seperated by commas. Or all entries with All.
    Incoming Always decrypt Encrypted emails Rules for incoming emails
    Not defined No changes are made to rules with lower priority, default settings are used if applicable.
    Do not Decrypt Encrypted emails are accepted and delivered encrypted.
    Optional decrypt Encrypted emails are decrypted when possible (DEFAULT). Emails that cannot be decrypted are delivered encrypted
    Always decrypt Encrypted emails Unencrypted emails are accepted. If an encrypted email cannot be decrypted, the sender receives an error report.
    Force Decryption Only encrypted emails are accepted. Unencrypted emails are rejected, and the sender receives an error report
    Starting from Sign only Rules for outgoing emails
    Not defined No changes are made to rules with lower priority, default settings are used if applicable.
    Neither sign nor encrypt Emails are sent unsigned and unencrypted (DEFAULT).
    Sign only Emails are sent signed and unencrypted (DEFAULT, certifikate set up for signing).
    Encrypt optional Emails are signed and encrypted if possible.
    Enforce Encryption Emails are exclusivley sent signed and encrypted. If this is not possilbe, the sender receives an error report.

    Add Pubkey

    mail.security S/MIME Public Keys

    To encrypt an email, a public key for the recipient must be available via a signed incoming email. If this is not the case, it can be imported manually using the button at the bottom right.

    notempty
    Only mailbox certificates can be imported. Domain certificates cannot be imported!
    Caption Value Description
    Pubkey Overview
    Certificate key 123456 Unique key for this certificate
    From date 2023-12-31T23:00:00+01:00 Date of certificate creation
    Date on 2037-12-31T22:59:59+01:00 Certificate expiration date
    Date of import 2025-04-10T15:14:00+02:00 Import date
    Mailbox maria@ttt-point.de Mailbox to which the certificate belongs
    Source manual Source of the certificate (currently only manual)
    Action Delete Deleting the certificate

    In dieser Seite werden die Variablen für unterschiedliche Sprachen definiert.
    Diese Seite wird auf folgenden Seiten eingebunden

























    Encryption

    mail.security S/MIME Encryption
    Caption Value Description
    Overview of Encryption Rules
    Priority 2 Rules are prioritized, where 1 has the highest priority. New rules are created with the highest priority.

    The priority can be adjusted using the arrows next to the encryption rule.

    Managed Mailbox/Domain ttt-point.de A mailbox managed by Securepoint mail.security within this organization.
    External Mailbox/Domain ttt-point.de A mailbox outside of this organization, to which emails are sent or received.
    Incoming Always decrypt Encrypted emails Rules for incoming emails
    Starting from Sign only Rules for outgoing emails
    Actions Edit Encryption rule
    Delete encryption Rule
    Create new Rule
    Managed Mailbox/Domain ttt-point.deAny A mailbox managed by Securepoint mail.security within this organization.
    A maximum of 20 entries can be selected, seperated by commas. Or all entries with All.
    Create new Encryption Rule
    External Mailbox/Domain anyAny A mailbox outside of this organization, to which emails are sent or received.
    A maximum of 20 entries can be selected, seperated by commas. Or all entries with All.
    Incoming Always decrypt Encrypted emails Rules for incoming emails
    Not defined No changes are made to rules with lower priority, default settings are used if applicable.
    Do not Decrypt Encrypted emails are accepted and delivered encrypted.
    Optional decrypt Encrypted emails are decrypted when possible (DEFAULT). Emails that cannot be decrypted are delivered encrypted
    Always decrypt Encrypted emails Unencrypted emails are accepted. If an encrypted email cannot be decrypted, the sender receives an error report.
    Force Decryption Only encrypted emails are accepted. Unencrypted emails are rejected, and the sender receives an error report
    Starting from Sign only Rules for outgoing emails
    Not defined No changes are made to rules with lower priority, default settings are used if applicable.
    Neither sign nor encrypt Emails are sent unsigned and unencrypted (DEFAULT).
    Sign only Emails are sent signed and unencrypted (DEFAULT, certifikate set up for signing).
    Encrypt optional Emails are signed and encrypted if possible.
    Enforce Encryption Emails are exclusivley sent signed and encrypted. If this is not possilbe, the sender receives an error report.

    Settings

    Caption Value Description

    SPF Whitelist

    SPF Whitelist
    Add a new entry     Add a new entry to the SPF Whitelist
    Settings - SPF Whitelist
    Entries 127.0.0.1 List of all current entries in the Whitelist
    Edit an entry in the Whitelist
    Delete an entry from the Whitelist

    Greylisting exceptions

    Greylisting exceptions
    Add a new entry     Add a new greylisting exception
    Settings - Greylisting Exceptions
    Entries 127.0.0.1 ist of all current greylisting exceptions
    Edit a greylisting exception
    Delete a greylisting exception

    Mailbox forwarding

    Mailbox forwarding
    Add a new mailbox for forwardings     Add a new forwarding address
    Settings - Mailbox forwarding
    Email forward@ttt-point.de List of all current forwardings
    Edit an email
    Delete an email

    Enforce TLS

    Enforce TLS
    Add a new entrynotempty
    New as of 04.2025
    		 mydomain.com / mail@mydomain.com For domains added to this list using the Confirm button, TLS will be enforced for both incoming and outgoing emails (TLS 1.2 and higher)

    Report Settings

    Report Settings
    Daily log statistics via email    The daily log statistics are sent automatically
    Settings- Report Settings
    Weekly log statistics via email    The weekly log statistics are sent automatically
    Monthly log statistics via email    The monthly log statistics are sent automatically
    Mailbox report logs@ttt-point.de The email address to which the logs should be sent
    Retrieved from "https://wiki.securepoint.de/index.php?title=Mailsecurity/Mailsecurity&oldid=100078"