Procedure

1. Enable IP Profiler.
   1. Choose IP Filtering → Overview from the menu.
   2. To enable IP profiler, select the IP Profiler check box.
   3. Click Save.
2. Configure IP Profiler settings.
   1. Choose IP Filtering → Rules from the menu.
      The Spam tab appears by default. If you are on a different tab, click the Spam tab.
   2. To enable blocking for spam, select the Enable check box.
   3. Configure the following:
      • Duration to monitor: The number of hours that IMSVA monitors email traffic to see if the percentage of spam email messages exceeds the Threshold you set below.
      • Threshold: The maximum percentage of spam email messages that IMSVA will allow during the value you set for Duration to monitor above. The threshold is a fraction with a numerator and denominator:
        • Rate (%): Type the maximum number of allowable email messages with spam threats (the numerator).
        • Total mails: Type the total number of spam email messages out of which the threshold percentage is calculated (the denominator).
        Consider the following example.
        Duration to monitor: 1 hour at a rate of 20 out of 100
        During each one-hour period that spam blocking is active, IMSVA starts blocking IP addresses when more than 20% of the messages it receives contain spam and the total number of messages exceeds 100.
   4. Next to Triggering action, select one of the following:
      • Block temporarily: Block email messages from the IP address and allow the upstream MTA to try again.
      • Block permanently: Never allow another email message from the IP address and do not allow the upstream MTA to try again.
   5. Click Save.

      Tip Trend Micro suggests keeping the default values, which provide an adequate level of protection. To restore the default values, click Restore Defaults.