Rate Control
- The 'Rate Control' feature protects an organization from spammers that send huge amounts of mail to your mail server.
- It counts the number of suspicious mails sent by a source in a set period of time. If the value exceeds the specified threshold then the sender IP is added to the blacklist.
- Click the 'Rate Control' tab in the SMTP IPS/FW module.
Rate Control Settings – Table of Column Descriptions |
|
---|---|
Column Header |
Description |
Category |
SPAM – Mails that are categorized as spam. LDAP – Verification of LDAP users. When
incoming mails are for users that are not in LDAP, the originating
IP address will be blacklisted. For example, if the number of
mails is set as 50, and the threshold percentage as 50%, then if
from a source if the number of mails for non LDAP users exceeds 25
within the check interval, then the source will be blacklisted. RELAY – IPs from which mails can be sent by users who are not available on the mail server. CERTAINLY SPAM – Mails that are categorized as definite spam. VIRUS – Mails that are categorized as with virus. |
Enable |
Activate or disable the Rate Control for a mail category. |
Top Received Mails |
The number of mails that need to be received in the specified interval before Korumail will activate threshold checks. If Korumail receives this number of mails from a source within the 'check interval' time, it will check what % of those mails are spam/relay/etc. If this exceeds the figure specified as the threshold then it will blacklist the sender. |
Check interval (in hours) |
Enter the time in hours for the specified number of mails to be checked for a category. |
Threshold (percentage) |
Enter or use the slider to set the threshold percentage for the 'Rate Control' to be applied for a category. For example, if the number of email is set as 60 for a category, then a 50% threshold means that when the number exceeds 30, then the originating IP address will be blocked. |
- Click 'Save' to apply your changes.