IronPort - advanced configuration guide

Chapter 2 Configuring Routing and Delivery Features
Figure 2-14 Setting Destination and Delivery Parameters
Using Virtual Gateway Technology
OL-25137-01
Public Listener: InboundMail
Host Access Table (HAT):
WHITELIST: $TRUSTED
BLACKLIST: $BLOCKED
SUSPECTLIST: $THROTTLED
UNKNOWNLIST: $ACCEPTED
spamdomain.com REJECT
.spamdomain.com REJECT
251.192.1. TCPREFUSE
169.254.10.10 RELAY
ALL: $ACCEPTED
Recipient Access Table (RAT):
example.com ACCEPT
newcompanyname.com ACCEPT
ALL REJECT
IP interface: PublicNet (e.g. 192.168.2.1)
Ethernet interface: Data 2
Ethernet interface: Data 1
IP interface: PrivateNet (e.g. 192.168.1.1)
Private Listener: OutboundMail
Host Access Table (HAT):
RELAYLIST: $RELAYED
ALL: $BLOCKED
Default sender domain: example.com
Received: header: DISABLED
Masquerading:
IronPort Email
Security appliance
A destconfig entry for the host
small-isp.net was used to limit
100 simultaneous connections, or
10 simultaneous connections using
Virtual Gateway addresses.
The deliveryconfig command
was used to use Auto-selection of
interfaces for email delivery and
the Possible Delivery feature was
enabled. The system-wide
maximum outbound message
delivery was set to 9000 total
concurrent connections.
This section describes Cisco IronPort Virtual Gateway technology and its benefits, how to set up a
Virtual Gateway address, and how to monitor and manage Virtual Gateway addresses.
The Cisco IronPort Virtual Gateway technology allows you to configure enterprise mail gateways for all
domains you host — with distinct IP addresses, hostname and domains — and create separate corporate
email policy enforcement and anti-spam strategies for those domains, while hosted within the same
physical appliance.
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
2-59