Cisco Cisco Email Security Appliance C190 用户指南

下载
页码 568
3-43
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
Chapter 3      LDAP Queries
Figure 3-12
Configuring the Acceptance Query in the SMTP Conversation
Once you configure LDAP acceptance queries for the listener, you must configure 
DHAP settings in the mail flow policy associated with the listener.
Figure 3-13
Configuring the Mail Flow Policy to Drop Connections in the 
SMTP Conversation
In the mail flow policy associated with the listener, configure the following 
Directory Harvest Attack Prevention settings:
  •
Max. Invalid Recipients Per hour. The maximum number of invalid 
recipients per hour this listener will receive from a remote host. This 
threshold represents the total number of RAT rejections combined with the 
total number of messages to invalid LDAP recipients dropped in the SMTP 
conversation or bounced in the work queue. For example, you configure the 
threshold as five, and the counter detects two RAT rejections and three