Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
1-17
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
OL-25137-01
Chapter 1 Customizing Listeners
Note that this parameter relates to the Mail Flow Policy -> Rate Limiting phase. It is not the same
as the “bits” field in the “network/bits” CIDR notation that may be used to classify IP addresses in
a Sender Group.
as the “bits” field in the “network/bits” CIDR notation that may be used to classify IP addresses in
a Sender Group.
By default, SenderBase Reputation Filters and IP Profiling support are enabled for public listeners and
disabled for private listeners.
disabled for private listeners.
Timeouts for SenderBase Queries
The method by which queries to the SenderBase information service — for both SenderBase DNS
queries and SenderBase Reputation Service Scores (SBRS Scores) — are configured has been improved
beginning with the 4.0 release of AsyncOS. Previously, the configurable timeout value maximum of 5
seconds could cause a delay in mail processing for some Cisco IronPort appliances experiencing heavy
load if the SenderBase information services were unreachable or unavailable.
queries and SenderBase Reputation Service Scores (SBRS Scores) — are configured has been improved
beginning with the 4.0 release of AsyncOS. Previously, the configurable timeout value maximum of 5
seconds could cause a delay in mail processing for some Cisco IronPort appliances experiencing heavy
load if the SenderBase information services were unreachable or unavailable.
The new timeout value can be configured first by issuing the
listenerconfig -> setup
command to
change the global settings for caching SenderBase information service data. You can allow the
SenderBase information service to determine the cache time (which is recommended), or you can specify
your own cache time. You can also disable caching.
SenderBase information service to determine the cache time (which is recommended), or you can specify
your own cache time. You can also disable caching.
You enable “look ups” to the SenderBase Information Service in the
listenerconfig -> setup
command for listeners.
In this example, the feature is enabled and the default timeout values (for queries and for all queries per
connection) are accepted:
connection) are accepted:
Then, for each mail flow policy, you allow “look ups” to the SenderBase Information service on a
per-mail flow policy basis using the
per-mail flow policy basis using the
listenerconfig -> hostaccess -> edit
command:
In the GUI:
Would you like to enable SenderBase Reputation Filters and IP Profiling
support? [Y]> y
Enter a timeout, in seconds, for SenderBase queries. Enter '0' to
disable SenderBase Reputation Filters and IP Profiling.
[5]>
Enter a timeout, in seconds, for all SenderBase queries per connection.
[20]>
Would you like to use SenderBase for flow control by default? (Yes/No/Default) [Y]>