Local Good Senders IP receives Connection Classification static spam attack verdict.

book

Article ID: 221865

calendar_today

Updated On:

Products

Messaging Gateway

Issue/Introduction

Local Good Senders IP receives Connection Classification static spam attack verdict.

 

Environment

SMG 10.7.4

Resolution

When IP address is in the Local Good Senders, it is automatically assigned to class #1.  
Now the default parameters for class #1 are:

[1.] 200 maximum connections per IP.
[2.] 34.4% of total allowed connections for this pool.
[3.] unlimited messages per connection.
[4.] 0% connections deferred automatically.
[5.] No reconnect timeout.

We assume these defaults were not altered.

If the new connection violates any of these restrictions, the connection then receives a
'spam attack' verdict.  The only two elements where there is a limit is # of connections
per IP, and total connections allowed for class 1.  The default for total connections
allowed is 2000 (this can be changed), so 34.4% of that is 688.

So, if there are already 200 active connections from that IP, or if there are already
688 active connections from class 1 IPs, then the new connection would be rejected.

We dont recommend tinkering with the percentage of connections allowed per class!

But increasing the number of allowed connections per IP, or the
total connections allowed (which is configured on the SMTP Advanced Settings page, not
the Connection Classification page) is safe and this is where a reasonable determination needs to
be made and monitored. This is system tuning for availability.