Google Message Security Troubleshooting Guide - Manual (Page 21)

22 Message Security Troubleshooting Guide
Connection Manager
What is Manual Pass Through and how do I use it?
Connection Manager detects servers that send a large amount of invalid mail -
spam, viruses, mail bombs or directory harvest attacks -- and blocks all mail from
those senders. This prevents a load on your server and shuts down malicious
senders. On rare occasions, Connection Manager can accidentally detect such an
attack when the sender is legitimate. Examples are an opt-in mailing list or
company newsletter may look like spam and get blocked, or another mail server
might be deliberately set to redirect traffic to your primary mail server.
If Connection Manager blocks all mail from an IP address you know is good,
create a Manual Pass-Through to prevent Connection Manager from blocking a
particular sending IP address.
Also, do not set up a Pass Through for your contact lists, because this could
create performance problems. Instead, set it up only if Connection Manager is
blocking bulk mail that you know is valid.
Note: Since messages are still filtered for spam and viruses, this is not the same
as an approved senders list or white list.
How do you locate the IP address of a server that has
opened a long time-duration TCP/IP connection to your mail
server?
1. From the Administration Console, go to the Organization pull-down list or the
Show Hierarchy window, to select the appropriate email server config for the
server that is being probed.
2. Select the Inbound Servers tab. The Connection Manager page appears.
3. Select the View Sender Specific Data link near the top right corner of the
page. The IP you are looking for will have an extremely long ‘Avg. Duration’
time and possible ‘Msg. Size’of 0.
Content Manager
How do I use regular expressions in Content Manager rules?
Regular expressions are a standard tool in many systems and scripting
languages.
For more information, see About Using Regular Expressions.