Cisco Cisco Email Security Appliance C160 Mode D'Emploi
3-159
Cisco IronPort AsyncOS 7.3 for Email Advanced Configuration Guide
OL-23081-01
Chapter 3 Configuring Routing and Delivery Features
IronPort Virtual Gateway technology ensures that reverse DNS look-ups will
always match the sending IP address, preventing messages from being blocked
accidentally.
always match the sending IP address, preventing messages from being blocked
accidentally.
Messages in each Virtual Gateway address are also assigned to a separate message
queue. If a certain recipient host is blocking email from one Virtual Gateway
address, messages intended for that host will remain in the queue and eventually
timeout. But messages intended for the same domain in a different Virtual
Gateway queue that is not being blocked will be delivered normally. While these
queues are treated separately for delivery purposes, the system administration,
logging and reporting capability still provide a holistic view into all Virtual
Gateway queues as if they were one.
queue. If a certain recipient host is blocking email from one Virtual Gateway
address, messages intended for that host will remain in the queue and eventually
timeout. But messages intended for the same domain in a different Virtual
Gateway queue that is not being blocked will be delivered normally. While these
queues are treated separately for delivery purposes, the system administration,
logging and reporting capability still provide a holistic view into all Virtual
Gateway queues as if they were one.
Setting Up Virtual Gateway Addresses
Before setting up the IronPort Virtual Gateway addresses, you must allocate a set
of IP addresses that will be used to send email from. (For more information, see
“Assigning Network and IP Addresses” in the Cisco IronPort AsyncOS for Email
Configuration Guide.) You should also ensure proper configuration of your DNS
servers so that the IP address resolves to a valid hostname. Proper configuration
of DNS servers ensures that if the recipient host performs a reverse DNS lookup,
it will resolve to valid IP/hostname pairs.
of IP addresses that will be used to send email from. (For more information, see
“Assigning Network and IP Addresses” in the Cisco IronPort AsyncOS for Email
Configuration Guide.) You should also ensure proper configuration of your DNS
servers so that the IP address resolves to a valid hostname. Proper configuration
of DNS servers ensures that if the recipient host performs a reverse DNS lookup,
it will resolve to valid IP/hostname pairs.
Creating New IP Interfaces for Use with Virtual Gateways
After the IP addresses and hostnames have been established, the first step in
configuring the Virtual Gateway addresses is to create new IP interfaces with the
IP/hostname pairs using the Network > IP Interfaces page in the GUI or the
configuring the Virtual Gateway addresses is to create new IP interfaces with the
IP/hostname pairs using the Network > IP Interfaces page in the GUI or the
interfaceconfig
command in the CLI.
Once the IP interfaces have been configured, you have the option to combine
multiple IP interfaces into interface groups; these groups can then be assigned to
specific Virtual Gateways addresses which the system cycles through in a “round
robin” fashion when delivering email.
multiple IP interfaces into interface groups; these groups can then be assigned to
specific Virtual Gateways addresses which the system cycles through in a “round
robin” fashion when delivering email.
After creating the required IP interfaces, you have two options for setting up the
Virtual Gateway addresses and defining which email campaign will be sent from
each IP interface or interface group:
Virtual Gateway addresses and defining which email campaign will be sent from
each IP interface or interface group: