Blocked Message Details

The Blocked Message Details chart on the Threats tab of Dashboard displays the number of messages blocked for different reasons.

Select a time period by Date, Week, Month, or Last 12 months to show data for the selected time period.

The specified time period only affects the data shown on this chart and its corresponding thumbnail chart on the Threats tab. Changing these selections does not affect other charts.

The traffic direction slightly changes the data displayed on charts. The following is the specific data displayed:

Table 1. Values on Charts
Value	For Incoming Mail	For Outgoing Mail
Sender IP found in QIL	The number of messages blocked because the sender IP address was detected in the Quick IP List (QIL)
Sender IP found in KSSL	The number of messages blocked because the sender IP address was found in the Known Spam Source List (KSSL)
Sender IP found in DUL	The number of messages blocked because the sender IP address was found in the Dynamic User List (DUL)
Sender IP found in ETL	The number of messages blocked because the sender IP address was found in the Emerging Threat List (ETL)
Sender IP found in block list	The number of messages blocked because the sender IP address was found in the customized block list
Recipient invalid	The number of messages blocked because the recipient was not in the Valid Recipient list when Recipient Directory Management is enabled
Sender IP not allowed	The number of messages blocked because the sender IP address was not in the Outbound Servers under Domain Management
Sender domain not found	The number of messages blocked because the sender domain was not found in the public DNS system
Recipient domain not found	The number of messages blocked because the recipient domain was not found in the public DNS system
TLS not available	The number of messages blocked because the email client did not use TLS
Message too big	The number of messages blocked because the message size exceeded the maximum
Rate limit exceeded	The number of messages blocked because the total number of messages exceeded the maximum limit in a certain period
Rate limit exceeded - message count (by IP address)	The number of messages blocked because the total number of messages sent from a single IP address exceeded the maximum limit in a certain period
Rate limit exceeded - message count (by email address)	The number of messages blocked because the total number of messages sent from or to a single email address exceeded the maximum limit in a certain period
Rate limit exceeded - data size (by IP address)	The number of messages blocked because the accumulated data size from a single IP address exceeded the maximum limit in a certain period
Rate limit exceeded - data size (by email address)	The number of messages blocked because the accumulated data size from or to a single email address exceeded the maximum limit in a certain period
Rate limit exceeded - data size (by domain)	The number of messages blocked because the accumulated data size from or to a single domain exceeded the maximum limit in a certain period
Recipient blocked	The number of messages blocked because the recipient email address was found in the internal global block list
Sender IP blocked	The number of messages blocked because the sender IP address was found in the internal global block list
Sender blocked	The number of messages blocked because the sender email address was found in the blocked sender list or the internal global block list
Policy matching error	The number of messages blocked because an error occurred during policy matching
Sender domain malformed	The number of messages blocked because the sender’s DNS record was found malformed
Recipient domain malformed	The number of messages blocked because the recipient’s DNS record was found malformed
Other	The number of messages blocked due to other reasons
Total	The total number of email messages blocked