Spam passed by Ironport.

[cschippers]

Hello,

We are using Ironport to scan email to our environment, but the last weeks we receive a lot of spam.  When we check the original sender ip at MXToolbox.com, this ip address is listed, but at Senderbase.org the ip address is not listed.

Is it possible to use also the MXtoolbox.com blacklists to check if the mail is not SPAM !

regards,

[Ken Stieers · Accepted solution]

You can use DNS based blacklists in 2 places: the HAT, or in content filters

To use them in the HAT.  Go to Mail Policies/HAT Overview, select the Sender group, and add the blacklist you want...

In the online help there is a bit more, search for "Sender Groups Defined by Querying DNS Lists"