email-analysis blocked-list sender-ip <IP_address>

Prev Next

Configures the block policy rule based on the IP address of the sender.

The appliance immediately marks an email for quarantine if it includes the sender IP address that you defined. A blocked list supports IPv4 and IPv6 addresses. All the recipients will receive a copy of the original malicious email with a different subject. In the Email Security — Server Web UI, an email can either be deleted or released from the eQuarantine page. For details about how to configure a blocked list, refer to the "Rule Configuration on Allowed and Blocked Lists" chapter of the Email Security — Server User Guide.

Note

You can use a regular expression within the sender IP address. Use a backslash (\) to escape special regular expression characters.

Syntax

[no] email-analysis blocked-list sender-ip <IP_address>

Parameters

no

Deletes the block policy rule based on the IP address of the sender.

<IP_address>

IP address of the sender.

Examples

The following example adds the IP address of the sender to a blocked list:

hostname (config) # email-analysis blocked-list sender-ip 44\.33\.22\.11

The following example adds all the IP addresses of an IP address range to a blocked list:

hostname (config) # email-analysis blocked-list sender-ip ^.*44\.33

The following example deletes the IP address of the sender from a blocked list:

hostname (config) # no email-analysis blocked-list sender-ip 44\.33\.22\.11

User role

Admin or Operator

Command mode

Config

Supported appliances

This command is supported on the following appliances running the specified releases or later:

  • Email Security — Server: Release 7.6. Support for IPv6 addresses was added in Release 8.0. Support for regular expression matching was added in Release 8.1.3.