Allows devices to connect and transmit emails to the Email Security — Server appliance only if their IP addresses are included in the MTA access restriction list.
You can specify up to ten IP addresses in the list. Both IPv4 and IPv6 addresses are supported. Separate addresses with a space. The Email Security — Server appliance checks each address for the proper syntax but does not validate the syntax. Trellix recommends that you validate the address or addresses before and after a change is made. By default, there is no access restriction to the MTA interface.
Note
The default configuration is
0.0.0.0/0 [::/0], which supports all MTA hosts.
You must telnet to your Email Security — Server appliance from the upstream MTA to verify that the configuration is correct.
For details about how to restrict MTA access, refer to the "Restricting MTA Access" section in the "Email MTA Configuration" chapter of the Email Security — Server User Guide.
Syntax
[no] email-analysis mta mynetworks <IPAddress>
Parameters
no
Resets the MTA access restriction to the default configuration.
<IPAddress>
One or more IP addresses.
Examples
The following example restricts all MTA hosts except the specified IPv4 address in Drop analysis mode:
hostname (config) # email-analysis mta mynetworks 172.16.183.3 MODE is drop
The following example restricts all MTA hosts except the specified IPv6 address in Drop analysis mode:
hostname (config) # email-analysis mta mynetworks 2001:470:84a7:3066::aa0 MODE is drop IPv6 enabled
The following example restricts all MTA hosts except the specified three IPv4 addresses in Drop analysis mode:
hostname (config) # email-analysis mta mynetworks 192.168.5.5 192.168.65.4 172.16.244.10 MODE is drop
The following example restricts all MTA hosts except the specified two IPv4 addresses and one IPv6 address in Drop analysis mode:
hostname (config) # email-analysis mta mynetworks 192.168.5.5 192.168.65.4 2001:470:84a7:3066::aa0 MODE is drop IPv6 enabled
The following example restricts all MTA hosts except one IPv4 address and mask with one IPv6 address and mask in Drop analysis mode:
hostname (config) # email-analysis mta mynetworks 192.168.0.0/16 2001:470:84a7:3066::/64 MODE is drop IPv6 enabled
The following example reloads the default configuration for MTA access:
hostname (config) # no email-analysis mta mynetworks
User role
Admin or Operator
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Email Security — Server: Release 7.6.0. Support for IPv6 addresses was added in Release 8.0.