Functions bypassed in Messaging Gateway through domain or IP Good Sender lists

Products

• Messaging Gateway

Issue/Introduction

• Cannot bypass content filtering when an entry is added to Local Good Senders (allowed list).
• I need to understand what the allowed sender list bypasses in Symantec Messaging Gateway (SMG).
• SMG does not exempt items in the Local Good Senders List (allowed list).
• What is bypassed when I add an Internal Mail Host?

Resolution

The following are functions that are bypassed on the Messaging Gateway when items are added to Local Good Senders or Internal Mail Hosts:

Local Good Sender Domains

• Spam
• Suspected Spam
• Newsletter
• Marketing Mail
• Redirect URL
• Local Bad Sender Domains
• Optionally bypass content filtering rules by adding an action of "Bypass Content Filtering Policy". (Either: All content filtering policies or those content filtering policies selected in the policy)

Local Good Sender IP's

• Third Party Bad Senders
• Symantec Global Bad Senders
• Local Bad Sender IP's
• Spam
• Suspected spam
• Newsletter
• Marketing mail
• Redirect URL
• Optionally bypass content filtering rules by adding an action of "Bypass Content Filtering Policy". (Either: All content filtering policies or those content filtering policies selected in the policy)

NOTE: Senders in the Symantec Global Good Senders, Local Good Sender IPs, and Third Party Good Senders groups are always assigned to the best class (Class 1). Senders in the Symantec Global Bad Senders, Local Bad Sender IPs, and Third Party Bad Senders groups are always assigned to the worst class (Class 9).

Internal Mail Hosts

• Local Good Sender IP's
• Third Party Good Senders
• Local Bad Sender IP's
• Third Party Bad Senders
• Directory Harvest Attacks
• Symantec Global Bad Senders
• Symantec Global Good Senders
• Connection Classification
• Email Virus Attacks (Malware scanning is still done)
• Fastpass

NOTE: Internal Mail Hosts supersede Local Good Sender IP's. If an IP is both in Local Good Sender IP's and Internal Mail Hosts, the items that are in Local Good Sender IP's are not bypassed, just the items in Internal Mail Hosts are bypassed.

Additional Information

Adding an IP to internal mail hosts will bypass the first two options for DNS Validation:

1. Reject connections where no reverse DNS record exists for the connecting IP address
2. Reject connections where the reverse DNS record exists for the connecting IP address, but the 'A' or 'AAAA' record of the resulting domain does not match the connecting IP address