McAfee MAP-3300-SWG - Web Security Appliance 3300, Product Manual

Page: 90 / 336

The order in which anti-relay checks take place
The appliance makes anti-relay checks at the RCPT TO phase of the SMTP conversation. It is important
to understand the order in which the anti-relay checks take place:
• Is the local domain list empty?
• Yes. The appliance operates as an open relay and allows the recipient to receive the message.
• No. The appliance performs the next check.
• Is the recipient or connection in the permitted domains list?
• Yes. The appliance allows the recipient to receive the message.
• No. The appliance performs the next check.
• Is the recipient or connection in the denied domains list?
• Yes. The appliance rejects the recipient.
• No. The appliance performs the next check.
• Is the recipient or connection in the local domain list?
• Yes. The appliance checks whether the recipient matches on a permitted routing character.
• Yes. The appliance accepts the recipient.
• No. the appliance checks whether the recipient matches on a denied routing character.
• Yes. The appliance rejects the recipient.
• No. The appliance accepts the recipient.
• No. The appliance rejects the recipient.
Relaying email
Use this section to specify domains and networks that can use the appliance for handling their email.
Table 69 Option definitions
Option Definition
Add Domain
Click to specify the domains that can relay messages through the appliance to the
recipient. Choose from:
•
Local domain
— These are the domains or networks for which email is accepted for
delivery. For convenience, you can import a list of your local domain names using
the
Import Lists
and
Export Lists
options. McAfee recommends that you add all domains
or networks that are allowed to relay messages as local domains.
•
Permitted domain
— Email is accepted. Use permitted domains to manage exceptions.
•
Denied domain
— Email is refused. Use denied domains to manage exceptions.
Hold your mouse cursor over the field to see the recommended format.
You must set up at least one local domain.
Add MX Lookup
Click to specify a domain that the appliance will use to identify all mail server IP
addresses from which it will deliver messages.
Delete Selected
Items
Removes the selected item from the table. You must apply the changes before the
item is completely removed from the appliance configuration.
Domain Name/
Network
Address/MX
Record
Displays the domain names, wildcard domain names, network addresses, and MX
lookups from which the appliance will accept or refuse email.
Overview of Email features
Email Configuration
90 McAfee Email and Web Security Appliances 5.6.0 Product Guide