IronPort - advanced configuration guide

2-74
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 2 Configuring Routing and Delivery Features
Note For outgoing mail, RSA Email Data Loss Prevention scanning takes place after the Outbreak Filters
stage.
Table 2-11 Email Pipeline for the Cisco IronPort Appliance: Receiving Email Features
Feature Description
Host Access Table (HAT)
ACCEPT, REJECT, RELAY, or TCPREFUSE
Host DNS Sender Verification connections
Sender Groups
Maximum outbound connections
Envelope Sender Verification Maximum concurrent inbound connections per IP address
Sender Verification Exception Table Maximum message size and messages per connection
Mail Flow Policies
Maximum recipients per message and per hour
TCP listen queue size
TLS: no/preferred/required
SMTP AUTH: no/preferred/required
Drop email with malformed FROM headers
Always accept or reject mail from entries in the Sender
Verification Exception Table.
SenderBase on/off (IP profiling/flow control)
Received Header Adds a received header to accepted email: on/off.
Default Domain Adds default domain for “bare” user addresses.
Bounce Verification Used to verify incoming bounce messages as legitimate.
Domain Map Rewrites the Envelope Recipient for each recipient in a
message that matches a domain in the domain map table.
Recipient Access Table (RAT) (Public listeners only) ACCEPT or REJECT recipients in
RCPT TO plus Custom SMTP Response. Allow special
recipients to bypass throttling.
Alias tables Rewrites the Envelope Recipient. (Configured
system-wide. aliasconfig is not a subcommand of
listenerconfig.)
LDAP Recipient Acceptance LDAP validation for recipient acceptance occurs within
the SMTP conversation. If the recipient is not found in the
LDAP directory, the message is dropped or bounced.
LDAP validation can be configured to occur within the
work queue instead.
OL-25137-01