Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

Скачать
Страница из 437
 
7-15
AsyncOS 8.1 for Cisco Content Security Management User Guide
 
Chapter 7      Managing the Cisco IronPort Spam Quarantine
Adding Entries to Safelists and Blocklists
Entries (including those using IPv6 addresses) can be added to safelists and blocklists using the 
following formats:
  •
user@domain.com
user@[203.0.113.15] 
user@[ipv6:2001:db8:80:1::5] 
  •
server.domain.com
  •
domain.com 
[203.0.113.15]
[ipv6:2001:db8:80:1::5] 
End users cannot add a sender or domain to both their safelist and their blocklist at the same time. 
However, if they add a domain to a safelist and a user in that domain to the blocklist (or vice versa), the 
appliance applies both rules. For example, if the end user adds example.com to the safelist, and adds 
george@example.com to the blocklist, the appliance delivers all mail from example.com without 
scanning for spam, but it treats mail from george@example.com as spam.
End users cannot allow or block a range of subdomains using the following syntax: .domain.com. 
However, an end user can explicitly block a specific domain using the following syntax: 
server.domain.com.
Working with Safelists
End users can add senders to safelists in two ways. From the Cisco IronPort Spam Quarantine, they can 
manually add a sender to the safelist by clicking the Options menu in the upper-right corner of the GUI 
and then selecting Safelist.
Add an email address or domain to the list, and click Add to List.
End users can also add senders to the safelist if the message has been sent to the Cisco IronPort Spam 
Quarantine. If the message from a particular sender is held in the Cisco IronPort Spam Quarantine, the 
end user can select the check box next to the message, and choose “Release and Add to Safelist” from 
the drop-down menu. 
The envelope sender and the From header for the specified mail are both added to the safelist, and the 
released messages proceed directly to the destination queue, skipping any further work queue processing 
in the email pipeline. 
Note
End users can also use the spam notification message to release messages. Click the Not Spam link to 
release a particular message. End users also have the option to add senders to their safelists.
Working with Blocklists
End users can use blocklists to prevent the delivery of mail from specified senders. To add senders to a 
blocklist, the end user selects Options > Blocklist from the end user quarantine. 
From the end user quarantine, the end user enters an email address or domain in the field, and clicks Add 
to List.