Generate report of Bed reputation emails

[Shalivahan Rajyaguru]

Hello Team,

Getting many bad reputation emails blocked by Symantec Messaging Gateway.

We tried to gather a list of IP addresses along with intended recipients' domain names from Report,

Could you assist in obtaining the IP addresses of the bad reputations list and domain names with specific email addresses.

Is it possible to generate the report which include email address of sender and recipient for targeted domain ? 

Thanks and regards,
Shalivahan

[Thomas Anderson]

The data you are looking for might not be available.  
What action does your reputation rule take?  More than likely it is set to REJECT connections from bad IPs.
So bad IP is detected at connection time and the connection is rejected.
This means that the SMTP conversation never gets past the "EHLO".  
(No MAIL FROM means no sender address to record).

You could change the action to something that occurs after the conversation completes, but that is kind of missing the whole point of the reputation service (not having to incur the processing overhead of junk mail from unreliable/malicious sources).

[alexander-smg]

That is weird to report on