Cisco Cisco Email Security Appliance X1050 Troubleshooting Guide

Page of 3
Contents
Introduction
Background Information 
Problem
Solution
Identify the poor SBRS mail server
Allow the poor SBRS mail server through the ESA
Related Information
Introduction
This article describes how to identify and temporarily allow mail servers with poor SenderBase
Reputation Score (SBRS) through the Email Security Appliance (ESA).
Background Information 
Sender reputation filtering is the first layer of spam protection, allowing you to control the
messages that come through the email gateway based on sender's trustworthiness as determined
by SBRS.  Email servers with poor SBRS can have their connections rejected, or their messages
bounced, based on your preferences.
Problem
A mail server connects to the ESA and is reported as poor SBRS and emails are delayed due to a
554 SMTP response received by the connecting server.
Sample 554 Response:
-----Original Message-----
From: Mail Delivery System [mailto:Mailer-Daemon@example.domain.com]
Sent: 25 April 2013 23:23
To: user@companyx.com
Subject: Mail delivery failed: returning message to sender
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
person@example.domain.com
SMTP error from remote mail server after initial connection:
host gatekeeper.companyx.com [195.195.195.1]: 554-gatekeeper1.companyx.com
554 Your access to this mail system has been rejected due to the sending
MTA's poor reputation. If you believe that this failure is in error, please
contact the intended recipient via alternate means.
Solution
Identify the poor SBRS mail server
Use the Command Line Interface (CLI) as the Graphical User Interface's (GUI) message tracking