IronPort - CLI reference guide

Chapter
Step 2 Outside of the Command Line Interface (CLI), get the file inbound.HAT.txt.
Step 3 With a text editor, create new HAT entries in the file.
In this example, the following entries are added to the HAT above the ALL
entry:
spamdomain.com REJECT
.spamdomain.com REJECT
251.192.1. TCPREFUSE
169.254.10.10 RELAY
– The first two entries reject all connections from the remote hosts in the
domain spamdomain.com and any subdomain of spamdomain.com.
– The third line refuses connections from any host with an IP address of
251.192.1.x.
– The fourth line allows the remote host with the IP address of
169.254.10.10 to use the IronPort appliance as an SMTP relay for all of
its outbound email to the Internet
Note The order that rules appear in the HAT is important. The HAT is read from
top to bottom for each host that attempts to connect to the listener. If a rule
matches a connecting host, the action is taken for that connection
immediately. You should place all custom entries in the HAT above an
ALL host definition. You can also use the HAT CLI editor or the GUI to
customize the HAT for a listener. For more information, see the
“Configuring the Gateway to Receive Mail” and “Using Mail Flow
Monitor” chapters in the IronPort AsyncOS User Guide.
Step 4 Save the file and place it in the configuration directory for the interface so that it
can be imported. (See Appendix B, “Accessing the Appliance,” for more
information.)
Step 5 Use the hostaccess -> import subcommand of listenerconfig to import the
edited Host Access Table file.
Cisco IronPort AsyncOS 7.6 CLI Reference Guide
511