Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
5-7
Cisco AsyncOS 8.5.5 for Email Security User Guide
Chapter 5 Configuring the Gateway to Receive Email
Configuring Global Settings for Listeners
Step 4
Submit and commit your changes.
Settings for Messages Containing Multiple Encodings: localeconfig
You can set the behavior of AsyncOS regarding modifying the encoding of message headings and footers
during message processing. This setting is not configured via the GUI. Instead, it is configured via the
during message processing. This setting is not configured via the GUI. Instead, it is configured via the
localeconfig
in the CLI.
Total Time Limit for All
Inbound Connections
Inbound Connections
Set the length of time AsyncOS will allow an inbound connection to remain
intact before closing it.
intact before closing it.
This setting is intended to preserve system resources by enforcing a
maximum allowable connection time. Once about 80% of this maximum
connection time is reached the following message is issued:
maximum allowable connection time. Once about 80% of this maximum
connection time is reached the following message is issued:
“421 Exceeded allowable connection time, disconnecting.”
The appliance will attempt to disconnect when the connection exceeds 80%
of the maximum connection time in order to prevent disconnecting
mid-message. It is likely that a problem is occurring with the inbound
connection if it is open long enough to reach 80% of the maximum
connection time. Keep this threshold in mind when specifying the time limit.
of the maximum connection time in order to prevent disconnecting
mid-message. It is likely that a problem is occurring with the inbound
connection if it is open long enough to reach 80% of the maximum
connection time. Keep this threshold in mind when specifying the time limit.
Only available for SMTP connections on public listeners. The default value
is 15 minutes.
is 15 minutes.
HAT delayed rejections
Configure whether to perform HAT rejection at the message recipient
level.By default, HAT rejected connections will be closed with a banner
message at the start of the SMTP conversation.
level.By default, HAT rejected connections will be closed with a banner
message at the start of the SMTP conversation.
When an email is rejected due to HAT “Reject” settings, AsyncOS can
perform the rejection at the message recipient level (RCPT TO), rather than
at the start of the SMTP conversation. Rejecting messages in this way delays
the message rejection and bounces the message, allowing AsyncOS to retain
more detailed information about the rejected messages. For example, you
can see the mail from address and each recipient address of the message
which is blocked. Delaying HAT rejections also makes it less likely that the
sending MTA will perform multiple retries.
perform the rejection at the message recipient level (RCPT TO), rather than
at the start of the SMTP conversation. Rejecting messages in this way delays
the message rejection and bounces the message, allowing AsyncOS to retain
more detailed information about the rejected messages. For example, you
can see the mail from address and each recipient address of the message
which is blocked. Delaying HAT rejections also makes it less likely that the
sending MTA will perform multiple retries.
When you enable HAT delayed rejection, the following behavior occurs:
•
The MAIL FROM command is accepted, but no message object is
created.
created.
•
All RCPT TO commands are rejected with text explaining that access to
send e-mail is refused.
send e-mail is refused.
•
If the sending MTA authenticates with SMTP AUTH, they are granted
a RELAY policy and are allowed to deliver mail as normal.
a RELAY policy and are allowed to deliver mail as normal.
Note
Only configurable from the CLI
listenerconfig
-->
setup
command.
Table 5-1
Listener Global Settings
Global Setting
Description