Messages received from Internal Mail Host receive "Delete" action on Messaging Gateway

Products

• Messaging Gateway

Issue/Introduction

Messaging Gateway (SMG) processes IP Reputation for messages originating from trusted Internal Mail Hosts differently than direct external connections. Understand why messages from these hosts may result in a "Delete" action rather than a "Reject connection" action.

Symptoms

• Messages sent from an IP address on the Internal Mail Host list trigger a "Delete" action.
• The expected "Reject connection" action does not occur at the connection level.
• Environment Messaging Gateway (All versions)

Cause

This behavior is by design. When an IP address appears on the Internal Mail Host list, SMG identifies the connection as trusted. To accurately enforce policy based on the originating IP Reputation, SMG must accept the connection to examine the "Received" headers. This process allows IP Reputation policy evaluation based on the header information, which results in a "Delete" action for content-based matches rather than a "Reject connection" action.

Resolution

No action is required.

Taking the "Delete" action for messages which fail IP Reputation checks but are received from an IP on the Internal Mail Host list is the expected behavior.