Introduction
This document describes how to configure inbound and outbound mail to exempt IP addresses, domains, or email addresses for the Cisco Email Security Appliance (ESA).
Exempt IP Addresses/Domains/Email Addresses from the ESA Bounce Configuration
You can specify recipient domains on which to disable Bounce Verification when the ESA delivers to those domains. You will need to configure both outbound and inbound mail.
Outbound Mail
- Go to Mail Policies > Destination Controls.
- Select "Add destination...".
- Call the new destination "example.com".
- In the settings, set "Bounce Verification" to No.
- Submit and Commit changes.
Note: For outbound mail, you can only refer to the destination domain and not an IP address or email address.
Inbound Mail
-
From Mail Policies > Mail Flow Policies, use an exisiting Mail Flow Policy or create a new Mail Flow Policy, and set the Bounce Verification/"Consider Untagged Bounces to be valid" to Yes.
-
From Mail Policies > Hat Overview, add the domain to a Sender Group that uses the modified or created Mail Flow Policy.
Notes: Failure to configure your inbound mail may cause your ESA to drop valid bounce messages for messages.
Notes: To verify that Bounce Verification is disabled for this domain, you can enable "domain debug logs" and tail the logs to verify.
Related Information