Email Security

I know we could whitelist some messages based on IP but is it possible to whitelist some messages based on the content in body messages?Supposed I'd like to by pass certain messages not to be scanned by CASE etc.TIA

Does Ironport able to reject domain with invalid MX record? (or is it already on the feature list?) Such as:# host -t mx yahool.comyahool.com mail is handled by 0 .# host -t mx san-ying.comsan-ying.com mail is handled by 10 218.4.48.181.# host -t mx...

i would like to check with you guys if you have encounter this issue before.under mail policies i have setup all positive mail to drop but my user are still receiving couple of mails with the [SPAM] tag at the subject of the mail.Any ideas?

Is it possible to block recipients of the form:aaa@bbb@cccaaa!bbb@cccaaa%bbb@cccduring the SMTP conversation?Not all of the domains that we accept can be verified with LDAP, so these messages come in and generally bounce at a later stage. Ideally I'...

IronPort Nation,I'd like to update you on the status of the DKIM initiative:The DKIM IETF draft is in pretty good shape. There have been several iterations over the course of the summer and the recent version seems to be pretty solid, with only min...

I just bought an Ironport on a recommendation from my Dell rep. I am moving from a pop3 server to MS Exchange and I wanted a spam filter for the new email server. I am a relative novice on MS Exchange and I have not yet opened the box on the Ironp...

How does ironport deals with brute force attacks on ssh and https?There is some kind of control?If someone leaves ironport's 22 and 443 ports "open" to the internet, it would be a problem if ironport does not control number of invalid logins attempts...

Collecting the information required to track or identify problem messages can be time consuming. Utilizing Ironport’s “Incoming Content Filters” and “Message Filter Action Variables” to add RFC2822 X-headers to inbound messages and can help streamli...

Hi,We are having a problem with just one particular company sending attachments to us. Normal email with no attachments is coming in fine. email with attachments is not. The sender (i.e at the other company) is getting the following message when they...

We recently deployed a couple of Ironport C600s and are now having tickets opened from domains we are blocking due to negitive reputation scores. I know we can "whitelist" these domains but being a large organization, I do not want the overhead of m...

I'm tryin to update rcptacess list from other server using:# ssh admin@ironport-c600 listenerconfig edit Our_Listener rcptaccess new newdomain.combut nothing happens, it's not adding newdomain.com to rcptaccess list.But if I do it from CLI, it worksW...

Which is better for your "always block" group? I want to prevent spam coming in the 3rd MX and the sender seeing that it is being blocked so they resend to the 2nd MX and on to the 1st MX.CH

Is there any new virus, outbrek or new spam today? Our workqueue raise about 4.4 K this afternoon.Seems nothing suspicious on the VOF quarantine or traffic.TIA.

Hi there,How do you configure your bounce profiles and why? What should one think of? I use default values .. is that good enough or is it recommended to change something?Best Regards,Magnus

We have 2 Public IPs on our C10. We have a business partner that needs the Common Name for the TLS Certificate to be the same as the ehlo hostname. Since it appears that only one Certificate can be loaded on an appliance, we are thinking of picking...