Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

 lists the predefined sender groups and mail flow policies that are configured when a public 

listener is created. 

WHITELIST

Add senders you trust to the Whitelist sender 
group. The $TRUSTED mail flow policy is 
configured so that email from senders you trust 
has no rate limiting enabled, and the content from 
those senders is not scanned by the Anti-Spam or 
Anti-Virus software. 

$TRUSTED

BLACKLIST

Senders in the Blacklist sender group are rejected 
(by the parameters set in the $BLOCKED mail 
flow policy). Adding senders to this group rejects 
connections from those hosts by returning a 5XX 
SMTP response in the SMTP HELO command. 

$BLOCKED

SUSPECTLIST

The Suspectlist sender group contains a mail flow 
policy that throttles, or slows, the rate of incoming 
mail. If senders are suspicious, you can add them 
to the Suspectlist sender group, where the mail 
flow policy dictates that:

Rate limiting limits the maximum number of 
messages per session, the maximum number 
of recipients per message, the maximum 
message size, and the maximum number of 
concurrent connections you are willing to 
accept from a remote host. 

The maximum recipients per hour from the 
remote host is set to 20 recipients per hour. 
Note that this setting is the maximum 
throttling available. You can increase the 
number of recipients to receive per hour if this 
parameter is too aggressive.

The content of messages will be scanned by 
the anti-spam scanning engine and the 
anti-virus scanning engine (if you have these 
feature enabled for the system). 

The SenderBase Reputation Service will be 
queried for more information about the 
sender. 

$THROTTLED