5.4.1 ORF Online Help
Select your ORF version:

Table of Contents

IP Blacklist


The IP blacklist allows you to blacklist emails from specific IP addresses or IP address ranges. This list is available under BlacklistsIP blacklist in the left navigation pane.

Enabling or Disabling the IP Blacklist

You can enable or disable the IP Blacklist test by clicking the ON / OFF button on top of the BlacklistsIP Blacklist page, or on the FilteringTests page.

Using the IP Blacklist

Adding, modifying and deleting addresses

Click the New button to add an IP address or IP address range to the list: this will invoke the IP Address Expression dialog. To modify an existing address definition, click Modify or hit Enter. IP address definitions can be deleted using the Delete button or the Delete key.

Testing against all IP blacklist entries

Click the Test button to invoke the Test IP Address Dialog, which can be used to quickly identify any entry matching the IP address you entered. This comes in handy if you want to identify which manually added entry blocked a legitimate sender (to avoid false positives in the future), or if you want to make sure your current entries do not blacklist a specific IP address.

For more information about this dialog, please consult the Test IP Address Dialog section.

Sorting the IP Blacklist

Click the column header of any column by which you wish to sort the domain list. To reverse sorting, click the column header again.

Exporting and importing the IP Blacklist

Right-click on the address list and select "Import list..." or "Export list..." Alternatively, you can do this from the menu by selecting FileImportIP Blacklist... or FileExportIP Blacklist....

Notes

Before and On Arrival actions

When an email is blacklisted by the IP blacklist, the action performed depends on the filtering point. Before Arrival, the email is rejected with an SMTP response indicating a protocol error. The On Arrival filter point provides a wider range of options; depending on your configuration, the email may get rejected, or tagged (either the header or the subject) and/or redirected to a specific mailbox.

SMTP responses

Emails blacklisted by the IP blacklist at the Before Arrival filtering point get rejected with an SMTP response indicating a protocol error. Edit the SMTP response for the IP blacklist on the FilteringActions page: click Edit, then click the "..." in the Edit column next to "IP blacklist" in the Before Arrival Action Settings dialog.

Email servers generate a bounce report (NDR) if they cannot deliver the email to the recipient due to a protocol error. Most email servers include the SMTP response of the recipient email server in the report, so you can customize the information received by the sender by editing the SMTP response.

The IP Blacklist and the filtering points

Before Arrival, the IP address checked is the incoming SMTP connection remote peer IP address.

At the On Arrival filtering point, ORF analyzes the delivery path of the email, which is stored in the email header. During this analysis ORF determines the sender IP based on your Intermediate Host List settings: it tests the first non-Intermediate Host against the IP Blacklist.

For more information, see the Header Analysis and Intermediate Host List sections.

Copyright © Vamsoft Ltd. 2024. All rights reserved. Document ID adm-ipblacklist, version 1.