The IP blacklist allows you to blacklist emails from specific IP addresses or IP address ranges. This list is available under in the left navigation pane.
You can enable or disable the IP Blacklist test by clicking the ON / OFF button on top of the
page, or on the page.Click the New button to add an IP address or IP address range to the list: this will invoke the IP Address Expression dialog. To modify an existing address definition, click Modify or hit Enter. IP address definitions can be deleted using the Delete button or the Delete key.
Click the Test button to invoke the Test IP Address Dialog, which can be used to quickly identify any entry matching the IP address you entered. This comes in handy if you want to identify which manually added entry blocked a legitimate sender (to avoid false positives in the future), or if you want to make sure your current entries do not blacklist a specific IP address.
For more information about this dialog, please consult the Test IP Address Dialog section.
Click the column header of any column by which you wish to sort the domain list. To reverse sorting, click the column header again.
Right-click on the address list and select "Import list..." or "Export list..." Alternatively, you can do this from the menu by selecting
or .Right-click on the list item or items and select "Search in logs..." to find log records that match the defined expression. Logs need to be loaded in the Log Viewer beforehand.
Before Arrival, the IP address checked is the incoming SMTP connection remote peer IP address.
At the On Arrival filtering point, ORF analyzes the delivery path of the email, which is stored in the email header. During this analysis ORF determines the sender IP based on your Intermediate Host List settings: it tests the first non-Intermediate Host against the IP Blacklist.
For more information, see the Header Analysis and Intermediate Host List sections.