ON PREMISES SOLUTIONS

Connection Rules

To access Connection Rules actions go to Products > Connection Rules.

For more information on the Connection Rules screen click here.

Creating a new Connection Rule

To create a new rule follow the below steps:

  1. Click the emailsecadd.png Add Rule button at the upper right side of the screen.

  2. Enter a descriptive rule name and click the Add emailsecadd2.png button. This will open the Rule Builder screen.

  3. Set the Active button on or off.

    Note

    • Newly created Rules are inactive by default.

    • Inactive rules will not be processed.

  4. (optional) Re-name the rule.

  5. (optional) Add a description to the rule - this is only visible from the Rule Builder screen and can be used to add a short explanation of what the rule is intended to do.

  6. Add the conditions. You can add one or more conditions to your rule. You can find a list of all available conditions here.

    Note

    • Be as specific as possible when creating conditions to avoid accidental triggering.

    • If more than one condition is added to the rule, all have to be passed for the action(s) assigned to the rule to be taken.

    • When creating a condition, you can set it to either Match or Does not Match when comparing against a specific value or data set.

    • Conditions can be system defaults or custom. Custom conditions can be accessed from the Custom Rule Data screen.

  7. Add the final rule. You can find a list of al available final actions here.

  8. Click the Save emailsecsave.png button.

Re-ordering message rules

To change the order in which your connection rules are processed, drag and drop it to a new position.

Note

You can not re-order system rules.

Editing a connection rule

To edit a Rule, double-click the rule's title in the Connection Rules screen or click on the Change Rule 75300_3.PNG button. This will open the Rule Builder screen.

Once the modifications are complete, click the save emailsecsave.png button.

Deleting a connection rule

To delete a Rule:

  • Click the delete delete_emsec.png button next to the rule you want to delete in the Connections Rules screen.

  • Click the delete emailsecdelete2.png button while editing a rule.

Connection rule examples

You can use this rule to detect the location of the connecting IP address and restrict or allow connections from specific areas.

Restricting connections from certain countries

To create a blacklist of countries that will not be allowed to interact with your domain follow the steps below:

  1. Go to Products > Email Security > Connection rules.

  2. Click the Add Rule emailsecadd.png button.

  3. Add a descriptive rule name and click the Add emailsecadd2.png button.

  4. Add a Direction condition, and set it to Matches: Inbound.

  5. Add a Sender IP Geo-location condition, set it to Matches: and select one or more countries you want to restrict.

  6. Add a Permanent Reject Final Action, and set it to Value: 5.7.1 geoip restriction.

    76907_9.png
  7. Click the Save emailsecsave.png button.

  8. Decide the priority of the rule in relation the other existing rules and drag it to the appropriate position in the Connection Rules window.

Note

Unless the Active button is set to On, the rule will not be processed.

Restricting connections except specific countries

Setting up this rule will prevent connections from any location except the ones you add to the below rule:

  1. Go to Products > Email Security > Connection rules.

  2. Click the Add Rule emailsecadd.png button.

  3. Add a descriptive rule name and click the Add emailsecadd2.png button.

  4. Add a Direction condition, and set it to Matches: Inbound.

  5. Add a Sender IP Geo-location condition, set it to Does not match:: and select one or more countries you want to allow.

  6. Add a Permanent Reject Final Action, and set it to Value: 5.7.1 geoip restriction.

    76907_10.png
  7. Click the Save emailsecsave.png button.

  8. Decide the priority of the rule in relation the other existing rules and drag it to the appropriate position in the Connection Rules window.

Note

Unless the Active button is set to On, the rule will not be processed.

Restricting connections from certain countries with exceptions for specific domains

To allow emails from a specific domain, while still denying emails from that domain's country of origin, create the following rule:

  1. Go to Products > Email Security > Custom Rule Data

  2. Click the Add New button and select Rule Data. Give it a descriptive name (e.g. No Spam filtering) and click Update.

    emailsecruledata.png
  3. Add the domains you want to be allowed to connect, each on a separate line:

    76907_11.png
  4. Go to Products > Email Security > Connection rules.

  5. Click the Add Rule emailsecadd.png button.

  6. Add a descriptive rule name and click the Add emailsecadd2.png button.

  7. Add a Direction condition, and set it to Matches: Inbound.

  8. Add a Sender condition, and set it to Does not Match:Allowed Domains (or whatever you named the rule data in step 2).

  9. Add a Sender IP Geo-location condition, set it to Matches: and select one or more countries you want to restrict.

  10. Add a Permanent Reject Final Action, and set it to Value: 5.7.1 geoip restriction.

    76907_12.png
  11. Click the Save emailsecsave.png button.

  12. Decide the priority of the rule in relation the other existing rules and drag it to the appropriate position in the Connection Rules window.