cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
683
Views
5
Helpful
2
Replies

Email Spoofing, blocking on C380

sandy.wilson1
Level 1
Level 1

Hi,

    With a view to helping reduce inbound spoofed mail I recently enabled  reverse PTR & forward 'A' checking against our 'suspectlist' sender group which behaved fine however having then also created an additional sender group 'Unverified' along with a new more strict throttle policy 'throttlemore' began to see issues with test emails not coming through when enabling the 'check for PTR record not existing'.  When checking inbound message headers each hop inbound looks fine with dns/ip entries as expected.  Has anyone experience a similar issue and was there a straight forward resolution ?

many thanks 

2 Replies 2

Raed Boshmaf
Cisco Employee
Cisco Employee

HI Raed,

  Many thanks for this, I should also add that we are attempting to target those senders also pretending to be from a domain they are sending from hence following the steps in the ESA_9-7 User guide to implement sender verfication'

Chapter 7 Defining Which Hosts Are Allowed to Connect Using the Host Access Table (HAT)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: