Cisco Cisco Content Security Management Appliance M1070 ユーザーガイド

ページ / 413
 
7-15
Cisco IronPort AsyncOS 8.0 for Security Management User Guide
 
Chapter 7      Managing the Cisco IronPort Spam Quarantine
Adding Entries to Safelists and Blocklists
Entries (including those using IPv6 addresses) can be added to safelists and blocklists using the 
following formats:
  •
user@domain.com
user@[203.0.113.15] 
user@[ipv6:2001:db8:80:1::5] 
  •
server.domain.com
  •
domain.com 
[203.0.113.15]
[ipv6:2001:db8:80:1::5] 
End users cannot add a sender or domain to both their safelist and their blocklist at the same time. 
However, if they add a domain to a safelist and a user in that domain to the blocklist (or vice versa), the 
appliance applies both rules. For example, if the end user adds example.com to the safelist, and adds 
george@example.com to the blocklist, the appliance delivers all mail from example.com without 
scanning for spam, but it treats mail from george@example.com as spam.
End users cannot allow or block a range of subdomains using the following syntax: .domain.com. 
However, an end user can explicitly block a specific domain using the following syntax: 
server.domain.com.
Working with Safelists
End users can add senders to safelists in two ways. From the Cisco IronPort Spam Quarantine, they can 
manually add a sender to the safelist by clicking the Options menu in the upper-right corner of the GUI 
and then selecting Safelist.
Figure 7-1
Safelist in End User Quarantine
Add an email address or domain to the list, and click Add to List.
End users can also add senders to the safelist if the message has been sent to the Cisco IronPort Spam 
Quarantine. If the message from a particular sender is held in the Cisco IronPort Spam Quarantine, the 
end user can select the check box next to the message, and choose “Release and Add to Safelist” from 
the drop-down menu.