Cisco Cisco Email Security Appliance C160 Mode D'Emploi
7-21
Cisco AsyncOS 8.5 for Email User Guide
Chapter 7 Defining Which Hosts Are Allowed to Connect Using the Host Access Table (HAT)
SenderBase Settings and Mail Flow Policies
Procedure
Step 1
Select Mail Policies > Address Lists.
Step 2
Click Add Address List.
Step 3
Enter a name for the address list.
Step 4
Enter a description of the address list.
Step 5
(Optional) To enforce using full email addresses in the address list, select Allow only full Email
Addresses.
Addresses.
Step 6
Enter the addresses you want to include. You can use the following formats:
•
Full email address:
user@example.com
•
Partial email address:
user@
Note
If you have selected Allow only full Email Addresses, you cannot use partial email
addresses.
addresses.
•
IP address in their email address:
@[1.2.3.4]
•
All users in a domain:
@example.com
•
All users in a partial domain:
@.example.com
Note that domains and IP addresses must start with a
@
character.
Separate email addresses with a comma. If you separate the addresses using a new line, AsyncOS
automatically converts your entries into a comma-separate list.
automatically converts your entries into a comma-separate list.
Step 7
Submit and commit your changes.
SenderBase Settings and Mail Flow Policies
In order to classify connections to the appliance and apply mail flow policies (which may or may not
contain rate limiting), a listener uses the following methodology:
contain rate limiting), a listener uses the following methodology:
Classification -> Sender Group -> Mail Flow Policy -> Rate Limiting
For more information, see
.
The “Classification” stage uses the sending host’s IP address to classify an inbound SMTP session
(received on a public listener) into a Sender Group. The Mail Flow Policy associated with that Sender
Group may have parameters for rate limiting enabled. (Rate limiting limits the maximum number of
messages per session, the maximum number of recipients per message, the maximum message size,
and/or the maximum number of concurrent connections you are willing to accept from a remote host.)
(received on a public listener) into a Sender Group. The Mail Flow Policy associated with that Sender
Group may have parameters for rate limiting enabled. (Rate limiting limits the maximum number of
messages per session, the maximum number of recipients per message, the maximum message size,
and/or the maximum number of concurrent connections you are willing to accept from a remote host.)
Normally, in this process, recipients are counted against each sender in the corresponding named sender
group. If mail is received from several senders in the same hour, the total recipients for all senders is
compared against the limit.
group. If mail is received from several senders in the same hour, the total recipients for all senders is
compared against the limit.
There are some exceptions to this counting methodology:
•
If the classification is done by Network Owner, then the SenderBase Reputation Service will
automatically divide a large block of addresses into smaller blocks.
automatically divide a large block of addresses into smaller blocks.