【原创】Cisco IronPort ESA 控制邮件[出接口]的四种方法 详解

[Bruce Liu]

The deliveryconfig CLIcommand controls primary IP interface for all maildelivery. // this command just in CLI, cannot setting from GUI.

If you want match part of outgoing mail,and control the delivery interface.
You can add an outgoingmail policy and use outgoing content filter with “Deliverfrom IP Interface” action.
To be honest, if you have an outgoingmail policy matched all outgoing mails. And the policy apply a contentfilter using “Deliver from IP Interface” action without condition, thebehavior same as “deliveryconfig” in CLI.

Anyway bellow feature cancontrol mail delivery interface:
0. deliveryconfig command : https://www.cisco.com/c/en/us/td/docs/security/esa/esa10-0/cli/b_CLI_Reference_Guide/b_CLI_Reference_Guide_chapter_0100.html#con_1115528
1. altsrchost command : https://www.cisco.com/c/en/us/td/docs/security/esa/esa10-0/cli/b_CLI_Reference_Guide/b_CLI_Reference_Guide_chapter_0100.html#con_1223783
2. “alt-src-host” action in message filter : https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html?bookSearch=true#con_1133810
3. “Deliver from IPInterface”action in content filter : https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01010.html

More detail as bellow:
0. If you want controlglobal delivery interface, please use deliveryconfig,
1. if you want controldelivery interface with some condition, (partial addresses such as"@example.com", "@.com", "user@", or "user@.com" are allowed.) please use altsrchost.
2. if you want controldelivery interface in message filter please use “alt-src-host”action.
Q:What condition can match in message filter?
A: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1125683

3. If you want controldelivery interface in content filter please use “Deliver from IP Interface”action
Q:What condition can match in content filter?
A: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01010.html#con_1127271

What’s content filter:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01010.html#con_1214342

What’s message filter(CLI only):
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html