bvanzant_ironport Fri, 08/03/2007 - 08:16
User Badges:

From the CLI you can:

listenerconfig -> edit -> -> hostaccess -> import

It will ask you for a filename that is in your configuration directory (so FTP it to the appliance first).

I generally don't like using any of these lists for anything other than putting into the SUSPECTLIST sendergroup.

This list is small enough that you could probably use the GUI to see if anyone from these ranges is actually sending you spam that the appliance isn't already catching. I would imagine that the SBRS folks also know about these network ranges and have weighted that fact appropriately in the SBRS score. This is kind of why you bought an IronPort in the first place, right? Hands-off management? :)

Doc_ironport Mon, 08/06/2007 - 05:20
User Badges:

I'm using AsyncOS 4.7.1 and interested to use  Spamhaus drop list

Senderbase already uses a number of RBL's as inputs for the Reputation Score for a host, including at least one "zombie" IP list. You'll almost certainly find that importing this list yourself doesn't change your spam catch rates, and just means more overhead for keeping it up to date (specifically if an address gets removed and you're still blocking it!)


This Discussion