cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1289
Views
0
Helpful
1
Replies

how i can detect and block an open mail relay sender in ESA

amahmud01
Level 1
Level 1

Hi  I am receiving a lot of targeted phishing email and want to block an open relay SMTP servers so that to avoid a newly created SMTP server to send me an email. 

 

your feedback is highly appreciated.

 

Thanks. 

1 Reply 1

Libin Varghese
Cisco Employee
Cisco Employee

Hi,

 

I'm not sure if there is a specific configuration for that, if you know certain IP's you would not like to allow emails from you can certainly add them to the HAT Blacklist.

 

You can also look at implementing SPF, DMARC checks for senders to allow only legitimate emails to come through.

 

https://www.cisco.com/c/dam/en/us/products/collateral/security/esa-spf-dkim-dmarc.pdf

 

 

Regards,

Libin