02-04-2017 10:45 PM
Hi,
I have an IronPort C670 working with AsyncOS 9.7 and I need to get the IP address of the remote clients with MIDs categorized as SPAM. How can I do this?
I know it's possible to create a message filter applied to the Mail Log including the $RemoteIP, but I don't know how to apply it for every spammer.
Could anyone help me? Maybe there are different ways to accomplish this task, but after reading the User Guide I can't figure out how to perform them.
Thanks in advance.
02-05-2017 05:45 PM
Hello,
This can be done by modifying the Anti-Spam settings on your mail policy. Under Advanced you have the option to add a header and can use the $RemoteIP variable.
Also, you can use the following article to test these settings : ESA FAQ: How can I test the ESA Anti-Spam feature?
Hope that helps! :)
Thanks!
-Dennis M.
____________________________
02-05-2017 06:52 PM
Works like a charm! Thank you so much!
02-06-2017 07:01 PM
You're very welcome! :) Glad I could help!
-Dennis M.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide