Messaging Gateway

 View Only
  • 1.  Why is Symantec Messaging Gateway dropping connections from spesific IP address?

    Posted Sep 02, 2015 05:08 AM

    We have been told by an external contact that emails sent to us is often returned with the message "You are not allowed to connect".

    I found the connection IP from one of the emails that were accepted and tried to look it up under Reputation Tools > Find Sender, but got "The sender does not belong to any sender group.". Then I tried IP Reputation Lookup and got the following:

    ipreplookup.png

    I cannot find a reason why so many connections are rejected. Filtering Connection IP in Message Audit Logs returns a list of thousands of rejected connections with Action "Rejected message by MTA".

    How can I find the reason for connection rejections?

     



  • 2.  RE: Why is Symantec Messaging Gateway dropping connections from spesific IP address?
    Best Answer

    Broadcom Employee
    Posted Sep 03, 2015 03:23 PM

    The message volume states it is high. Connection classification is designed to prevent one sender from sending you  too many emails in a small amount of time. This is becuase that is normally how spammers operate.

    If you want your external contact to not be filtered in that way and trust that they will not send you spam, you should put their IP address in the Local Good Sender IPs.



  • 3.  RE: Why is Symantec Messaging Gateway dropping connections from spesific IP address?

    Posted Sep 03, 2015 04:03 PM

    Thanks for your reply.

    What if I do not trust that they will not send me spam? The IP address in question belongs to an ISP and is used by their customers. Will adding this address to Local Good Sender IPs bypass all other scanning?



  • 4.  RE: Why is Symantec Messaging Gateway dropping connections from spesific IP address?

    Broadcom Employee
    Posted Sep 03, 2015 06:32 PM

    Yes it will, which is why you should not if you do not have confidence in them as a sender. The Messaging Gateway is doing its job to protect you from floods of emails.



  • 5.  RE: Why is Symantec Messaging Gateway dropping connections from spesific IP address?

    Posted Sep 04, 2015 02:29 AM

    I have done some more digging in logs and it looks like message volume from this IP address has normalized and it is no longer rejected. No action needed on my part. Thank you for your time.