Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Emails from certain IP addresses are being blocked in InterScan Messaging Security Virtual Appliance (IMSVA)

    • Updated:
    • 13 Oct 2015
    • Product/Version:
    • InterScan Messaging Security Virtual Appliance 8.2
    • InterScan Messaging Security Virtual Appliance 8.5
    • Platform:
    • Linux - Red Hat RHEL 5 64-bit
Summary

A legitimate email is being blocked from a particular email address. After further investigation, you find out that the IP address is listed in IP Profiler as temporarily blocked. The time stamp of the blocked IP is almost a month ago.The temporarily blocked IP address can be found in the IMSS console (IP Profiler > Blocked List).

Details
Public

By default, the IP Profiler function does not automatically remove a temporarily blocked IP address. Mail clients from these blocked IP addresses will always get a 421 error.

These IP addresses have to be manually removed by the IMSS administrator. There is a hidden key that should be added to the foxdns.ini file. This will remove the  blocked IP address automatically and according to the interval set by the key.

To automatically remove the blocked IP:

  1. Stop the IMSVA foxdns service. Run the following command:

    IMSSHOME/script/S99FOXDNS stop

  2. Go to the /opt/trend/imss/config directory and then open the foxdns.ini file.
  3. Add the following parameter under the [foxdns] section:

    keep_tempblocked_mins=#

    Note: The unit, #, is in minutes.

    Example: "keep_tempblocked_mins=1440"

    This means that the default time is 24 hours.

  4. Start the IMSVA foxdns service. Run the following command:

    IMSSHOME/script/S99FOXDNS start

Premium
Internal
Rating:
Category:
Configure; Troubleshoot
Solution Id:
1057132
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.