Senderbase gotcha for those changing IP address

[tminchin_ironport]

We discovered an interesting Senderbase gotcha - which might be useful for those people changing IP addresses for high volume mail servers.

Anyway, we had a situation were a third parties high volume email system was shifted to a new data centre and got new IP addresses. Within a day or two their SBRS was -2.6 without a single spam complaint being lodged. This was apparently due to the sudden high volume - after a couple of weeks it has stabilised to where it is not being throttled by our Ironports anymore.

[eparsons_ironport]

This type of problem is supposed to be addressed by having new address have a senderbase score of 'none' isnt it?

New in AsyncOS 4.5 is the ability to include a SBRS score of "None" when configuring a sender group. When editing the sender group settings for a sender group, you can mark the Include SBRS Scores of "None" box. Please note that this is recommended for suspect senders only.

[tminchin_ironport]

No, the "new and fresh" IP addresses quickly assumed a negative rating due to the fact they were legitimately relaying spam email (ie a lot).

Legitimately? They are an email forwarding provider where anti-spam and anti-virus features are an expensive optional extra...