IronPort - advanced configuration guide

Chapter 2 Configuring Routing and Delivery Features
OL-25137-01
Note The Masquerading feature is configured on a per-listener basis, as opposed to the Alias Tables
functionality, which is configured for the entire system.
Note A listener checks the masquerading table for matches and modifies the recipients while the message is
in the work queue, immediately after LDAP recipient acceptance queries and before LDAP routing
queries. Refer to “Understanding the Email Pipeline” in the Cisco IronPort AsyncOS for Email
Configuration Guide.
The Masquerading feature actually rewrites addresses for the Envelope Sender and the To:, From:, and
CC: fields of the email that has been received. You can specify different masquerading parameters for
each listener you create in one of two ways:
Step 1 via a static table of mappings you create, or
Step 2 via an LDAP query.
Masquerading and altsrchost
This section discusses the static table method. The table format is forward-compatible with the
/etc/mail/genericstable feature of a sendmail configuration on some Unix systems. See Chapter 3,
“LDAP Queries” for more information on LDAP masquerading queries.
Generally, the masquerading feature rewrites the Envelope Sender, and any subsequent actions to be
performed on the message will be “triggered” from the masqueraded address. However, when you run
the altscrchost command from the CLI, the altsrchost mappings are triggered from the original address
(and not the modified, masqueraded address).
For more information, see Using Virtual Gateway Technology, page 2-59 and Review: Email Pipeline,
page 2-73.
Configuring Static Masquerading Tables
You configure the static masquerading table of mappings by using the edit -> masquerade subcommand
of the listenerconfig command. Alternatively, you can import a file containing the mappings. See
Importing a Masquerading Table, page 2-19. The subcommand creates and maintains a table that maps
input addresses, usernames, and domains to new addresses and domains. See Chapter 3, “LDAP
Queries” for more information on LDAP masquerading queries.
When messages are injected into the system, the table is consulted, and the message is rewritten if a
match in the header is found.
A domain masquerading table is constructed as follows:
Table 2-3 Masquerading Table Syntax
Left-hand Side (LHS) Separator Right-hand Side (RHS)
a list of one or more usernames and/or
domains to match
whitespace (space or tab
character)
the rewritten username and/or
domain
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
2-17