Руководство Пользователя для Cisco Cisco Email Security Appliance C170

Скачать
Страница из 400
 
1-17
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
OL-25137-01
Chapter 1      Customizing Listeners
Note that this parameter relates to the Mail Flow Policy -> Rate Limiting phase. It is not the same 
as the “bits” field in the “network/bits” CIDR notation that may be used to classify IP addresses in 
a Sender Group.
By default, SenderBase Reputation Filters and IP Profiling support are enabled for public listeners and 
disabled for private listeners. 
Timeouts for SenderBase Queries
The method by which queries to the SenderBase information service — for both SenderBase DNS 
queries and SenderBase Reputation Service Scores (SBRS Scores) — are configured has been improved 
beginning with the 4.0 release of AsyncOS. Previously, the configurable timeout value maximum of 5 
seconds could cause a delay in mail processing for some Cisco IronPort appliances experiencing heavy 
load if the SenderBase information services were unreachable or unavailable. 
The new timeout value can be configured first by issuing the 
listenerconfig -> setup 
command to 
change the global settings for caching SenderBase information service data. You can allow the 
SenderBase information service to determine the cache time (which is recommended), or you can specify 
your own cache time. You can also disable caching. 
You enable “look ups” to the SenderBase Information Service in the 
listenerconfig -> setup
 
command for listeners. 
In this example, the feature is enabled and the default timeout values (for queries and for all queries per 
connection) are accepted: 
Then, for each mail flow policy, you allow “look ups” to the SenderBase Information service on a 
per-mail flow policy basis using the 
listenerconfig -> hostaccess -> edit
 command:  
In the GUI: 
Would you like to enable SenderBase Reputation Filters and IP Profiling
support? [Y]> y
Enter a timeout, in seconds, for SenderBase queries. Enter '0' to 
disable SenderBase Reputation Filters and IP Profiling.
[5]>
Enter a timeout, in seconds, for all SenderBase queries per connection.
[20]>
Would you like to use SenderBase for flow control by default?  (Yes/No/Default) [Y]>