I'm glad your jumped into this post:
I saw that option, but when I did my query the result is empty.
The 3rd Party List action is set to: Reject SMTP Connection
Brightmail should end the connection immediately after the HELO Command, since he already knows that the IP is on a 3rd Party Bad Senders. So Brightmail have no information for the from, the recipient, etc and that could explain, the query I did is empty.
What else could I try? Or is there a misconfiguration in our Brightmail somewhere?
With my previous anti-spam I was able to tell the Block count of each list that was set and the % of each blocklist versus good email.
I will like to achieve something like that in Brightmail:
Symantec Global Bad Sender: 40%
Zen.spamhaus.org: 10%
Spam: 10%
Recipient Rejected: 2%
Good Email: 38%
Let me know your thought about that?
Thank!