InterScanTM Messaging Security Virtual Appliance - Online Help ...

Trend Micro InterScan Messaging Security Virtual Appliance Administrator’s Guide
9-20
• SMTP error code: Blocks any connections that have a certain SMTP
code. Type an SMTP code.
• SMTP error string: Type the message associated with the SMTP error
code.
Advanced:
• Default intelligent action: Email reputation permanently denies connection
(550) for RBL+ matches and temporarily denies connection (450) for Zombie
matches.
• Take customized action for all matches:
4. Click Save.
• SMTP error code: Blocks any connections that have a certain SMTP
code. Type an SMTP code.
• SMTP error string: Type the message associated with the SMTP error
code.
Note: The above SMTP error code and error string will be sent to the upstream
MTA that will then take the necessary pre-configured actions, such as
recording the error code and error string in a log file.
Displaying Suspicious IP Addresses and
Domains
IMSVA creates log entries of the IP addresses or domains that have sent email messages
violating scanning conditions, but are still not blocked because the total number of
messages did not exceed the threshold you set for the given time period.
To display suspicious IP addresses and domains:
1. Click IP Filtering > Suspicious IP.
2. Choose from any of the following conditions:
• Next to Type, select the check boxes next to the type of threat that the IP filter
detected.
• Next to Dates, select the date-time range within which IMSVA blocked the
sender.