IronPort - advanced configuration guide

Figure 2-5 Masquerading Defined for a Private Listener
The Domain Map Feature
2-28
SMTP
Public Listener: InboundMail
Host Access Table (HAT):
WHITELIST: $TRUSTED
BLACKLIST: $BLOCKED
SUSPECTLIST: $THROTTLED
UNKNOWNLIST: $ACCEPTED
spamdomain.com REJECT
.spamdomain.com REJECT
251.192.1. TCPREFUSE
169.254.10.10 RELAY
ALL: $ACCEPTED
Recipient Access Table (RAT):
IP interface: PublicNet (e.g. 192.168.2.1)
Ethernet interface: Data 2
Ethernet interface: Data 1
IP interface: PrivateNet (e.g. 192.168.1.1)
Private Listener: OutboundMail
Host Access Table (HAT):
RELAYLIST: $RELAYED
ALL: $BLOCKED
Default sender domain: example.com
Received: header: DISABLED
Masquerading:
IronPort Email
Security appliance
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Two entries were added to the
masquerading table for this
private listener. The first entry
masks all subdomains of a
network (e.g.
exchange.example.com is
rewritten as example.com). The
second entry rewrites the bare
address joe as
joe@example.com.
Chapter 2 Configuring Routing and Delivery Features
You can configure a “domain map” for listeners. For each listener you configure, you can construct a
domain map table which rewrites the Envelope Recipient for each recipient in a message that matches a
domain in the domain map table. This feature is similar to the sendmail “Domain Table” or Postfix
“Virtual Table” feature. Only the Envelope Recipient is affected; the “To:” headers are not re-written by
this feature.
OL-25137-01