27.11.2012 Views

IronPort - advanced configuration guide

IronPort - advanced configuration guide

IronPort - advanced configuration guide

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Figure 2-4 Alias Tables Defined for the Appliance<br />

Configuring Masquerading<br />

2-16<br />

SMTP<br />

Public Listener: InboundMail<br />

Host Access Table (HAT):<br />

WHITELIST: $TRUSTED<br />

BLACKLIST: $BLOCKED<br />

SUSPECTLIST: $THROTTLED<br />

UNKNOWNLIST: $ACCEPTED<br />

spamdomain.com REJECT<br />

.spamdomain.com REJECT<br />

251.192.1. TCPREFUSE<br />

169.254.10.10 RELAY<br />

ALL: $ACCEPTED<br />

Recipient Access Table (RAT):<br />

IP interface: PublicNet (e.g. 192.168.2.1)<br />

Ethernet interface: Data 2<br />

Ethernet interface: Data 1<br />

IP interface: PrivateNet (e.g. 192.168.1.1)<br />

Private Listener: OutboundMail<br />

Host Access Table (HAT):<br />

RELAYLIST: $RELAYED<br />

ALL: $BLOCKED<br />

Default sender domain: example.com<br />

Received: header: DISABLED<br />

The Alias Table feature was<br />

configured to create the following<br />

aliases:<br />

admin:<br />

administrator@example.com<br />

[ example.com ]<br />

<strong>IronPort</strong> Email<br />

Security appliance<br />

Cisco <strong>IronPort</strong> AsyncOS 7.6 for Email Advanced Configuration Guide<br />

customercare: bob@example.com,<br />

frank@example.com,<br />

sally@example.com<br />

Note that alias tables apply to all<br />

email traveling through (received by)<br />

the appliance, from both private and<br />

public listeners.<br />

Chapter 2 Configuring Routing and Delivery Features<br />

Masquerading is a feature that rewrites the Envelope Sender (also known as the sender, or MAIL FROM)<br />

and the To:, From:, and/or CC: headers on email processed by a listener according to a table that you<br />

construct. A typical example implementation of this feature is “Virtual Domains,” which allows you to<br />

host multiple domains from a single site. Another typical implementation is “hiding” your network<br />

infrastructure by “stripping” the subdomains from strings in email headers. The Masquerading feature<br />

is available for both private and public listeners.<br />

OL-25137-01

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!