キャンセル
次の結果を表示 
次の代わりに検索 
もしかして: 
cancel
2153
閲覧回数
5
いいね!
3
返信

ESA HAT Blacklist

ccna_security
Level 3
Level 3

HI. Our esa's Blacklist is configured as between -10 -3. Spam send to our company which has score -1. The question is that if i add hostname of spam to HAT-Blacklist, will it catch that spam next time?

1 件の受理された解決策

受理された解決策

Hi,

That's right. The sendergroup is given precedence over the sbrs score and we just need to make sure that the email is not hitting any other sender group above the one in which are adding the IP address or hostname.
That is the reason how we are able to whitelist any particular IP address or hostnames with poor SBRS score as well.
Please check the below article on more information with regards to the same:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200436-Identify-and-allow-poor-SenderBase-Reput.html

Cheers,
Pratham

元の投稿で解決策を見る

3件の返信3

ppreenja
Cisco Employee
Cisco Employee

Hi,

Yes, if any IP address or hostname is added to a sendergroup then it matches the given sendergroup, provided it is not hitting any other sendergroup above it.
However, please note that adding the same to the Blacklist sendergroup will reject email and connection level itself and not catch the email (quarantine it if you mean the same).

Cheers,
Pratham

So you mean that score doesnt matter if i add any hostname to blacklist. Email will be droped even if it comes from a server which has good reputation if i add it to balcklist, right? 

Hi,

That's right. The sendergroup is given precedence over the sbrs score and we just need to make sure that the email is not hitting any other sender group above the one in which are adding the IP address or hostname.
That is the reason how we are able to whitelist any particular IP address or hostnames with poor SBRS score as well.
Please check the below article on more information with regards to the same:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200436-Identify-and-allow-poor-SenderBase-Reput.html

Cheers,
Pratham