Click the Exhibit button
Referring to the exhibit, what is the expected behavior?
A.
E-mail from juniper net will be blocked because juniper.net is on the blacklist.
B.
E-mail from jumper net will be permitted because juniper net is listed second on the blacklist.
C.
E-mail from nancy@juniper net will be permitted because [email protected] is on the whitelist.
D.
E-mail from [email protected] will be blocked because [email protected] is on the blacklist.
If “The match importance order for identifying spam is IP address on the whitelist, IP address on the blacklist, IP address on the SBL server, domain name on the whitelist, domain name on the blacklist, e-mail address on the whitelist, and e-mail address on the blacklist.” is true,
then A should be the answer.
Yeah i think so – that A is the answer.
Antispam filtering uses local lists for matching in the following manner:
Sender IP: The sender IP is checked against the local whitelist, then the local blacklist, and then the SBL IP-based server (if enabled).
Sender Domain: The domain name is checked against the local whitelist and then against the local blacklist.
Sender E-mail Address: The sender e-mail address is checked against the local whitelist and then against the local blacklist.
Ref: http://www.juniper.net/techpubs/en_US/junos12.3×48/topics/concept/utm-antispam-filter-local-list-understanding.html
By default, the device first checks incoming e-mail against the local whitelist and blacklist. If the sender is not found on either list, the device proceeds to query the SBL server over the Internet. When both server-based antispam filtering and local list antispam filtering are enabled, checks are done in the following order:
The local whitelist is checked. If there is a match, no further checking is done. If there is no match…
The local blacklist is checked. If there is a match, no further checking is done. If there is no match…
The SBL server list is checked.
So >> correct answer is C.