Cisco Cisco Email Security Appliance X1070 Mode D'Emploi

SUSPECTLIST

The Suspectlist sender group contains a mail flow 
policy that throttles, or slows, the rate of incoming 
mail. If senders are suspicious, you can add them 
to the Suspectlist sender group, where the mail 
flow policy dictates that:

Rate limiting limits the maximum number of 
messages per session, the maximum number 
of recipients per message, the maximum 
message size, and the maximum number of 
concurrent connections you are willing to 
accept from a remote host. 

The maximum recipients per hour from the 
remote host is set to 20 recipients per hour. 
Note that this setting is the maximum 
throttling available. You can increase the 
number of recipients to receive per hour if this 
parameter is too aggressive.

The content of messages will be scanned by 
the anti-spam scanning engine and the 
anti-virus scanning engine (if you have these 
feature enabled for the system). 

The SenderBase Reputation Service will be 
queried for more information about the 
sender. 

$THROTTLED

UNKNOWNLIST

The Unknownlist sender group may be useful if 
you are undecided about the mail flow policy you 
should use for a given sender. The mail flow 
policy for this group dictates that mail is accepted 
for senders in this group, but the Anti-Spam 
software (if enabled for the system), the anti-virus 
scanning engine, and the SenderBase Reputation 
Service should all be used to gain more 
information about the sender and the message 
content. Rate limits for senders in this group are 
also enabled with default values. For more 
information on virus scanning engines, see 

. For 

more information on the SenderBase Reputation 
Service, see 

. 

$ACCEPTED

ALL

Default sender group that applies to all other 
senders. For more information, see 

$ACCEPTED