IronPort - advanced configuration guide

Chapter 1 Customizing Listeners
Timeouts for SenderBase Queries
OL-25137-01
Note that this parameter relates to the Mail Flow Policy -> Rate Limiting phase. It is not the same
as the “bits” field in the “network/bits” CIDR notation that may be used to classify IP addresses in
a Sender Group.
By default, SenderBase Reputation Filters and IP Profiling support are enabled for public listeners and
disabled for private listeners.
The method by which queries to the SenderBase information service — for both SenderBase DNS
queries and SenderBase Reputation Service Scores (SBRS Scores) — are configured has been improved
beginning with the 4.0 release of AsyncOS. Previously, the configurable timeout value maximum of 5
seconds could cause a delay in mail processing for some Cisco IronPort appliances experiencing heavy
load if the SenderBase information services were unreachable or unavailable.
The new timeout value can be configured first by issuing the listenerconfig -> setup command to
change the global settings for caching SenderBase information service data. You can allow the
SenderBase information service to determine the cache time (which is recommended), or you can specify
your own cache time. You can also disable caching.
You enable “look ups” to the SenderBase Information Service in the listenerconfig -> setup
command for listeners.
In this example, the feature is enabled and the default timeout values (for queries and for all queries per
connection) are accepted:
Would you like to enable SenderBase Reputation Filters and IP Profiling
support? [Y]> y
Enter a timeout, in seconds, for SenderBase queries. Enter '0' to
disable SenderBase Reputation Filters and IP Profiling.
[5]>
Enter a timeout, in seconds, for all SenderBase queries per connection.
[20]>
Then, for each mail flow policy, you allow “look ups” to the SenderBase Information service on a
per-mail flow policy basis using the listenerconfig -> hostaccess -> edit command:
Would you like to use SenderBase for flow control by default? (Yes/No/Default) [Y]>
In the GUI:
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
1-17