The following sections categorize and describe the switches that you can use to configure the GWIA’s SMTP/MIME settings:
The following switches enable SMTP and suppress version information display.
Enables the GWIA to process SMTP messages. See Configuring Basic SMTP/MIME Settings.
Syntax: --smtp
Suppresses the GroupWise version and copyright date information that the GWIA typically responds with when contacted by another SMTP host or a telnet session.
Syntax: --nosmtpversion
The following switches determine how the GWIA handles email addresses:
Determines the address qualification level. It specifies which GroupWise address components (domain.post_office.user) must be included as the user portion of a GroupWise user’s outbound Internet address (userhost). Valid options are auto, userid, po, and domain.
This switch is valid only if your system is not configured to use Internet-style addressing. For more information, see Managing Internet Domains, Addressing, and Access, Or you have configured the GWIA to ignore Internet-style addressing. For more information, see Configuring How the GWIA Handles Email Addresses.
Syntax: --aql option
Example: --aql po
Option |
Description |
---|---|
auto |
This option causes the gateway to include the addressing components required to make the user’s address unique. If a user name is unique in a GroupWise system, the outbound address uses only the user_name. If the post_office or domain.post_office components are required to make the address unique, these components are also included in the outbound address. The auto option is the default. |
userid |
This option requires the gateway to include only the user_name in the outbound Internet address, even if the user name is not unique in the system. If a recipient replies to a user whose user name is not unique and no other qualifying information is provided, that reply cannot be delivered. |
po |
This option requires the gateway to include post_office.user_name in every outbound address, regardless of the uniqueness or non-uniqueness of the user name. |
domain |
This option requires the gateway to include the fully qualified GroupWise address (domain.post office.user_name) in every outbound address, regardless of the uniqueness or non-uniqueness of the user name. This option guarantees the uniqueness of every outbound Internet address, and ensures that any replies are delivered. |
The user part of a GroupWise user’s outbound Internet address (user@host) can and sometimes must include the full Groupwise address (domain.post_office.user_name@host) in order to be unique. The ‑‑aqor switch configures the GWIA to move any GroupWise address components, except the user_name component, to the right side of the address following the at sign (@). In this way, GroupWise addressing components become part of the host portion of the outbound Internet address. The ‑‑aql switch specifies which components are included.
For example, if the ‑‑aqor switch is used (in conjunction with the ‑‑aql-domain switch), Bob Thompson’s fully qualified Internet address (headquarters.advertising.bob@novell.com) is resolved to bob@advertising.headquarters.novell.com for all outbound messages.
If the ‑‑aqor switch is used with the ‑‑aql-po switch, Bob’s Internet address is resolved to bob@advertising.novell.com for all outbound messages.
If you use the ‑‑aqor switch to move GroupWise domain or post office names to be part of the host portion on the right side of the address, you must provide a way for the DNS server to identify the GroupWise names. You must either explicitly name all GroupWise post offices and domains in your system as individual MX Records, or you can create an MX Record with wildcard characters to represent all GroupWise post offices and domains. For information about creating MX Records, see details found in RFC #974.
For details about this setting, see Configuring How the GWIA Handles Email Addresses.
Enables or disables additional routing information that is put in the SMTP return address to facilitate replies. This switch might be needed in large systems with external GroupWise domains in which the external GroupWise users have not been configured in your local domain. Options include Never and Always. Most sites do not need to use this switch.
Syntax: --ari never|always
Example: --ari never
In the GroupWise Administration Console, you can control whether or not rule-generated messages are allowed to leave your GroupWise system by selecting or deselecting the Rule-Generated Messages options available in each class of service defined for the GWIA. This switch enables you to be specific in the types of rule-generated messages that are blocked.
Syntax: --blockrulegenmsg forward | reply | none | all
Example: --blockrulegenmsg forward
In order for this switch to take effect, senders must be in a class of service where rule-generated messages are allowed. For more information, see Creating a Class of Service.
GroupWise supports both Internet-style addressing (user@host) and GroupWise proprietary addressing (user_name.post_office.domain). By default, the GWIA uses Internet-style addressing. See Configuring How the GWIA Handles Email Addresses. You can use this switch to disable Internet-style addressing.
Syntax: --dia
By default, users’ display names are First Name Last Name. If you want users’ display names to be Last Name First Name, you can use the ‑‑displaylastfirst switch. This forces the display name format to be Last Name First Name, regardless of the preferred address format.
Syntax: --displaylastfirst
By default, the GWIA accepts addresses of the format:
firstname_lastname@internet_domain_name
Even though this is not an address format that the GroupWise Administration Console included in the Allowed Address Formats list in the GroupWise Administration Console for configuring Internet addressing, you can use this switch to prevent this address format from being accepted by the GWIA. For more information, see Allowed Address Formats.
Syntax: --dontreplaceunderscore
Specifies a return address for GroupWise replies. A message that has been received by a GroupWise user through the GWIA and is replied to has this return address form. These switches cause the GWIA to produce a return address of the form foreign domain.type:"user host." Foreign domain can be any foreign domain you have configured and linked to the GWIA.
You can use the same foreign domain name for both the ‑‑fd822 switch and the ‑‑fdmime switch. You can specify multiple foreign domain and kind pairs by placing them in quotes. If multiple foreign domain and kind pairs are used, the first domain/kind pair is the return address for replies to messages received through the GWIA. The second domain/kind pair is checked to see what message format is used for old replies in the system. Up to four pairs can be specified with an 80-character limit.
This switch lets you change your foreign domain names in your GroupWise system and still have replies work. For example, if your foreign domain is called faraway and you added a foreign domain called Internet, you could use ‑‑fd822-"internet.nonmime smtp.nonmime." This causes replies to have a return address of internet.nonmime.:"user@host." The GWIA would also recognize faraway. This switch also lets you migrate from one foreign domain to another.
Most administrators do not need to use this switch.
Syntax: --fd822 foreign_domain.type
Example: --fd822 Internet.nonmime
Specifies a return address for GroupWise replies. A message that has been received by a GroupWise user through the GWIA and is replied to has this return address form. These switches cause the GWIA to produce a return address of the form foreign_domain.type:"user host." Foreign_domain can be any foreign domain you have configured and linked to the GWIA. Type can be either mime or nonmime.
You can use the same foreign domain name for both the ‑‑fd822 switch and the ‑‑fdmime switch.
You can specify multiple foreign domain and kind pairs by placing them in quotes. If multiple foreign domain and kind pairs are used, the first domain/kind pair is the return address for replies to messages received through the GWIA. The second domain/kind pair is checked to see what message format is used for old replies in the system. Up to four pairs can be specified with an 80-character limit.
This switch lets you change your foreign domain names in your GroupWise system and still have replies work. For example, if your foreign domain is called SMTP and you add a foreign domain called Internet, you can use ‑‑fdmime-"internet.mime smtp.mime." This causes replies to have a return address of internet.mime:"user@host." The GWIA also recognizes SMTP. This switch also lets you migrate from one foreign domain to another.
Most administrators do not need to use this switch.
Syntax: --fdmime foreign_domain.type
Example: --fdmime Internet.mime
Turns on group expansion. By default, the GWIA does not expand groups, which means that recipients listed in groups do not receive incoming Internet messages that are addressed to groups.
Use this switch to expand groups into individual email addresses of the group members, so that the recipients in groups do receive incoming Internet messages addressed to groups. See Configuring How the GWIA Handles Email Addresses.
Syntax: --group
See also --nickgroup.
When constructing the MIME for outgoing messages, discard all users that expanded out of system distribution lists. Instead include a reference to the distribution list. This results in a smaller MIME and Reply to All list for the recipient. This setting corresponds with the GWIA’s ‑‑keepsendgroups switch.
Syntax: --keepsendgroups
NOTE:If you retain groups on outgoing messages, Reply to All might not work unless you also enable inbound group expansion by using the --group switch.
Replaces spaces with underscores (_) in the email address of the sender for outbound messages. For example, john smith becomes john_smith.
It does not replace spaces in the addresses of recipients.
Syntax: --msstu
Turns on group expansion only for groups that have nicknames. By default, the GWIA does not expand groups, which means that recipients listed in groups do not receive incoming Internet messages that are addressed to groups. If you use the ‑‑group switch, the GWIA expands all groups.
Use this switch to expand only nicknamed groups. This means that recipients listed in nicknamed groups do receive incoming Internet messages that are addressed to the nickname of the group, but they do not receive incoming Internet messages that are addressed to groups that do not have nicknames. For information about nicknames, see Managing User Email Addresses. See also Configuring How the GWIA Handles Email Addresses.
Syntax: --nickgroup
See also --group.
Disables the function of mapping an x-priority MIME field to a GroupWise priority for the message. By default, the GWIA maps x-priority 1 and 2 messages as high priority, x-priority 3 messages as normal priority, and x-priority 4 and 5 as low priority in GroupWise.
Syntax: --nomappriority
Configures the GWIA to not include the user’s familiar name, or display name, in the From field of the message’s MIME header. In other words, the From field is address rather than "familiar_name" address.
Syntax: --notfamiliar
Configures the GWIA to use the real user in the Mail From field instead of having auto-forwards come from Postmaster and auto-replies come from Mailer-Daemon.
Syntax: --realmailfrom
The following switches determine how the GWIA formats and encodes inbound and outbound email messages:
Configures the GWIA to maintain the original format of any file type attachment.
Syntax: --attachmsg
Sets the confidence level at which you want the GWIA to use the detected character set rather than the default character set when no character set is specified. The GWIA tries to detect the character set based on the presence or absence of certain characters in the text. The default confidence level is 25, meaning that if the detection process returns a confidence level of 25 or above, the GWIA uses the detected character set, but if the confidence level is less than 25, the GWIA uses the default character set. Valid values range from 0 to 100.
Syntax: --charsetconfidencelevel number
Example: --charsetconfidencelevel 35
Configures the GWIA to map inbound non-MIME messages to another character set that you specify. The mapped character set must be an Asian (double-byte) character set.
Syntax: --dbchar822 charset
Example: --dbchar822 shift_jis
Specifies what character set to use if no character set is specified in an incoming MIME-encoded message.
Syntax: --defaultcharset charset
Example: --defaultcharset iso-8859-1
Specifies what character set to use if no character set is specified in an incoming message that is not MIME encoded. The default is US_ASCII.
Syntax: --defaultnonmimecharset charset
Example: --defaultnonmimecharset iso-8859-1
By default, the GWIA uses 8-bit MIME encoding for any outbound messages that are HTML-formatted or that contain 8-bit characters. If, after connecting with the receiving SMTP host, the GWIA discovers that the receiving SMTP host cannot handle 8-bit MIME encoded messages, the GWIA converts the messages to 7-bit encoding.
You can use the ‑‑force7bitout switch to force the GWIA to use 7-bit encoding and not attempt to use 8 bit MIME encoding. You should use this option if you are using a relay host that does not support 8-bit MIME encoding. See Configuring Basic SMTP/MIME Settings.
Syntax: --force7bitout
Configures the GWIA to map inbound MIME ISO-8859-1 messages to another character set that you specify.
Syntax: --iso88591is charset
Example: --iso88591is big5
Configures the GWIA to map all outbound MIME messages to the KOI8 (Russian) character set.
Syntax: --koi8
Configures the GWIA to not use ISO-2022 character sets. ISO-2022 character sets provide 7-bit encoding for Asian character sets.
Syntax: --noiso2022
Disables quoted printable message text for outbound messages. If this switch is turned on, messages are sent with Base64 MIME encoding, unless all the text is US-ASCII. If you use this switch you need to review the setting for the ‑‑wrap switch to ensure that message text wraps correctly. See Determining Format Options for Messages.
Syntax: --nqpmt
Appends the global signature to messages that are relayed through your GroupWise system (for example, messages from POP and IMAP clients) in addition to messages that originate within your GroupWise system. See Adding a Global Signature to Users’ Messages.
Syntax: --relayaddsignature
Requires the GWIA to connect through SSL/TLS before accepting AUTH login. The switch can be overridden if the AUTH request occurs on the secure SMTP port (143) instead of the normal port (25). It is overridden because SSL/TLS is required on port 143 no matter what is configured here.
This switch maps to the GWIA > SMTP/MIME > ESMTP Settings > Require SSL for authentication setting.
Syntax: --RequireSSLForAuth
Specifies the maximum number of threads that the GWIA uses when converting inbound messages from MIME format to the GroupWise message format. The default setting is 4. The lowest valid setting is 1. There is no upper limit, but the larger the number of threads, the more resources are used, perhaps with little benefit unless a very large amount of data needs to be processed in a very small amount of time. See Determining Format Options for Messages.
Multiple threading allows for more than one receive process to be running concurrently. A receive request is assigned to a single thread and is processed by that thread. If you anticipate heavy inbound message traffic, you can increase the number of threads to enhance the speed and performance of the GWIA. The number of threads is limited only by the memory resources of your server.
Syntax: --rt
Specifies the maximum number of threads that the GWIA uses when converting outbound messages from GroupWise message format to MIME format. The default setting is 4. The lowest valid setting is 1. There is no upper limit, but the larger the number of threads, the more resources are used, perhaps with little benefit unless a very large amount of data needs to be processed in a very small amount of time. See Determining Format Options for Messages.
Multiple threading allows for more than one send process to be running concurrently. A send request is assigned to a single thread and is processed by that thread. If you anticipate heavy outbound message traffic, you can increase the number of threads to enhance the speed and performance of the GWIA. The number of threads is limited only by the memory resources of your server.
Syntax: --st
Sets the line length for outbound messages that do not use quoted printable or Base64 MIME encoding. This is important if the recipient’s email system requires a certain line length. See Determining Format Options for Messages.
Syntax: --wrap line_length
Example: --wrap 72
The following switches configure how the GWIA handles forwarded and deferred messages:
Automatically strips out the empty message that is created when a message is forwarded without adding text, and retains the original sender of the message, rather than showing the user who forwarded it. This facilitates users forwarding messages from GroupWise to other email accounts. Messages arrive in the other accounts showing the original senders, not the users who forwarded the messages from GroupWise.
Syntax: --flatfwd
Provides a notification message to users whose email messages cannot be immediately sent out across the Internet. This provides more noticeable notification to users than manually checking the Properties page of the sent item to see whether it has been sent.
Syntax: --delayedmsgnotification
Specifies the number of hours after which the GWIA stops trying to send deferred messages. The default is 96 hours, or four days. You might prefer to receive an undeliverable notification sooner, perhaps in as little as 5 hours. A deferred message is any message that can’t be sent because of a temporary problem (host down, MX record not found, and so on). See Configuring Basic SMTP/MIME Settings.
Syntax: --maxdeferhours hours
Example: --maxdeferhours 48
Specify in a comma-delimited list the number of minutes after which the GWIA retries sending deferred messages. The default is 20, 20, 20, 240. The GWIA interprets this list as follows: It retries 20 minutes after the initial send, 20 minutes after the first retry, 20 minutes after the second retry, and 240 minutes (4 hours) after the third retry. You might prefer for the fourth retry to occur sooner, perhaps in only 2 hours.
Thereafter, it retries according to the last retry interval until the number of hours specified in the Maximum Number of Hours to Retry a Deferred Message field is reached. You can provide additional retry intervals as needed. It is the last retry interval that repeats until the maximum number of hours is reached. See Configuring Basic SMTP/MIME Settings.
Syntax: --msgdeferinterval minutes,minutes...,minutes
Example: --msgdeferinterval 10,10,10,120
The following switches configure the GWIA’s Extended SMTP (ESMTP) settings:
Disables ESMTP support in the GWIA.
Syntax: --noesmtp
Enables Delivery Status Notification (DSN). The GWIA requests status notifications for outgoing messages and supplies status notifications for incoming messages. This requires the external email system to also support Delivery Status Notification. Currently, notification consists of two delivery statuses: successful and unsuccessful. See Using Extended SMTP (ESMTP) Options.
Syntax: --dsn
The ‑‑dsnage switch specifies the number of days that the GWIA retains information about the external sender so that status updates can be delivered to him or her. For example, the default DSN age causes the sender information to be retained for 4 days. If the GWIA does not receive delivery status notification from the GroupWise recipient’s Post Office Agent (POA) within that time period, it deletes the sender information and the sender does not receive any delivery status notification. See Using Extended SMTP (ESMTP) Options.
Syntax: --dsnage
The following switches configure the GWIA’s SMTP send/receive cycle and threads:
Specifies how often, in seconds, the GWIA polls for outbound messages. The default,10 seconds, causes the GWIA to poll the outbound message folder every 10 seconds. See Configuring Basic SMTP/MIME Settings.
Syntax: --p seconds
Example: --p 5
Specifies the maximum number of threads used for processing SMTP receive requests (inbound messages). Each thread is equivalent to one connection. The default is 16 threads. Setting the receive threads to 0 stops messages from being received through the GWIA. There is no upper limit, but the larger the number of threads, the more resources are used, perhaps with little benefit. See Configuring SMTP/MIME Services.
Syntax: --rd number_of_threads
Example: --rd 20
Specifies the maximum number of threads used for processing SMTP send requests (outbound messages). Each thread is equivalent to one connection. The default is 8 threads. Setting the send threads to 0 stops messages from being sent through the GWIA. There is no upper limit, but the larger the number of threads, the more resources are used, perhaps with little benefit. See Configuring Basic SMTP/MIME Settings.
Syntax: --sd number_of_threads
Example: --sd 12
Configures the GWIA to quickly terminate any active send/receive threads when it restarts.
Syntax: --killthreads
Changes the SMTP listen port from the default of 25. Use this switch only if the GWIA is receiving messages only from SMTP hosts that can be configured to connect to GWIA on a specified port.
Syntax: --smtpport
Example: --smtpport 2525
SMTP dial-up services can be used when you don’t require a permanent connection to the Internet and want to periodically check for mail messages queued for processing. The following switches can be used when configuring dial-up services.
Enables SMTP dial-up services.
Syntax: --usedialup
Specifies the IP address or DNS host name of the mail server where your mail account resides at your Internet Service Provider. You should obtain this address from your Internet Service Provider.
Syntax: --etrnhost address
Example: --etrnhost 172.16.5.18
Specifies your email domain as provided by your Internet Service Provider.
Syntax: --etrnqueue email_domain
Example: --etrnqueue novell.com
Specifies the RAS Security user if you are using a Windows Remote Access Server (RAS) and the GWIA is not running on the same server as the RAS.
Syntax: /dialuser-user_name
Example: /dialuser-rasuser
Specifies the RAS Security user’s password if you are using a Windows Remote Access Server (RAS) and the GWIA is not running on the same server as the RAS.
Syntax: /dialpass-password
Example: /dialpass-raspassword
The following switches specify how long SMTP services waits to receive data that it can process. After the time expires, the GWIA might give a TCP read/write error. Leave these switches at the default setting unless you are experiencing a problem with communication.
Specifies how long the program waits for an SMTP command. The default is 2 minutes.
Syntax: --tc minutes
Example: --tc 3
Specifies how long the program waits for data from the receiving host. The default is 5 minutes.
Syntax: --td minutes
Example: --td 2
Specifies how long the program waits for the receiving host to establish a connection. The default is 5 minutes.
Syntax: --te minutes
Example: --te 2
Specifies how long the program waits for the initial greeting from the receiving host. The default is 3 minutes.
Syntax: --tg minutes
Example: --tg 2
Specifies how long the program waits for a TCP read. The default is 10 minutes.
Syntax: --tr minutes
Example: --tr 2
Specifies how long the program waits for the receiving host to terminate the connection. The default is 5 minutes.
Syntax: --tt minutes
Example: --tt 2
The following switch configures whether or not the GWIA uses a relay host.
Specifies the IP address or DNS host name and port of one or more relay hosts that you want the GWIA to use for outbound messages. Use a space to separate multiple relay hosts in a list.
The relay host can be part of your network or can reside at the Internet service provider’s site. This switch is typically used in firewall integration if you want one server, the specified relay host, to route all mail. See Configuring Basic SMTP/MIME Settings.
Syntax: --mh address:port
Example: --mh 172.16.5.18:587
The GWIA supports SMTP host authentication for both inbound and outbound message traffic. The following switches are used with inbound and outbound authentication:
Ensures that the GWIA accepts messages only from remote SMTP hosts that use the AUTH LOGIN authentication method to provide a valid GroupWise user name and password. The remote SMTP hosts can use any valid GroupWise user name and password. However, for security reasons, we recommend that you create a dedicated GroupWise user account for remote SMTP host authentication.
Syntax: --forceinboundauth
NOTE:Using the --forceinboundauth switch overrides the Prevent Message Relaying setting for the GWIA in the GroupWise Administration Console for POP and IMAP users. To completely prevent message relaying when using the --forceinboundauth switch, you must also specify the --disallowauthrelay switch.
Ensures that the GWIA sends messages only to remote SMTP hosts that are included in a gwauth.cfg text file. The remote SMTP hosts must support the AUTH LOGIN authentication method.
The gwauth.cfg file must reside in the domain\wpgate\gwia folder and use the following format:
domain_name authuser authpassword
For example:
smtp.novell.com remotehost novell
You can define multiple hosts in the file. Ensure that you include a hard return after the last entry.
If you use this switch, you need to include your GWIA as an entry in the gwauth.cfg file to enable status messages to be returned to GroupWise users. You can use any GroupWise user name and password for your GWIA’s authentication credentials. However, for security reasons, we recommend that you create a dedicated GroupWise user account for your GWIA.
Syntax: --forceoutboundauth
The following switches determine how the GWIA handles undeliverable messages:
Specifies where to send problem messages. Problem messages can be placed in the GWIA problem folder (gwprob), they can be sent to the postmaster, or they can be sent to both or neither. The values for this switch are move, send, both, and neither.
The move option specifies to place problem messages in the gwprob folder for the GWIA. The send option specifies to send the message as an attachment to the GWIA postmaster defined in the GroupWise Administration Console (GWIA object > GroupWise > Administrators). The both option specifies to move the message to gwprob and send it to the postmaster. The neither option specifies to discard problem messages. The default when no switch is specified is move. See Determining What to Do with Undeliverable Messages.
Syntax: --badmsg move|send|both|neither
Example: --badmsg both
Forwards undeliverable messages to the specified host. See Determining What to Do with Undeliverable Messages.
Syntax: --fut host
Example: --fut novell.com
Controls how much of the original message is sent back when a message is undeliverable. By default, only 2 KB of the original message is sent back. The value is specified in KB (8=8KB). See Determining What to Do with Undeliverable Messages.
Syntax: --mudas KB
Example: --mudas 16
Multiple unsolicited messages (sometimes called a mailbomb or spam) from the Internet can potentially harm your GroupWise messaging environment. At the least, it can be annoying to your users. You can use the following switches to help protect your GroupWise system from malicious, accidental, and annoying attacks:
Prevents spammers from using GroupWise accounts to authenticate to the GWIA and using it as a relay host for their spam. It has no effect on normal GroupWise account usage in a GroupWise client or GroupWise Web. However, it does prevent users who access their GroupWise mailboxes from a POP or IMAP client from sending messages to users outside of the GroupWise system, because the GWIA identifies this activity as relaying.
Syntax: --disallowauthrelay
Sets the number of messages that can be received from a single IP address in a given number of seconds before the GWIA denies access to its GroupWise system. It provides a form of system security to protect your system from mailbombs.
For example, with ‑‑mbcount set to 25 and ‑‑mbtime set to 60 seconds, if these limits are exceeded, then the sender’s IP address is blocked from sending any more messages for the remainder of that 60 second window. The IP address of the sender is also displayed in the GWIA console. You can permanently restrict access to your system by that IP address through settings on the Access Control tab in the GroupWise Administration Console (GWIA object > Access Control). By default, the mailbomb feature is turned off. To enable this feature, you must specify a value for mailbomb count and mailbomb time. See Mailbomb (Spam) Protection.
Syntax: --mbcount-number
Example: --mbcount 25
Specifies the mailbomb time limit in seconds. This switch works with the ‑‑mbcount switch to block access to your GroupWise system from unsolicited inundations of email. The default value is 10 seconds. See Mailbomb (Spam) Protection.
Syntax: --mbtime seconds
Example: --mbtime 60
Prevents delivery of messages if the sender’s host is not authentic. When this switch is used, the GWIA refuses messages from a host if a DNS reverse lookup shows that a PTR record does not exist for the IP address of the sender’s host. See Mailbomb (Spam) Protection.
If this switch is not used, the GWIA accepts messages from any host, but displays a warning if the initiating host is not authentic.
Syntax: --rejbs
Flags messages to be handled by the client Junk Mail Handling feature if they contain an x-spam-flag:yes in the MIME header. See Customized Spam Identification.
Syntax: --xspam
Lets you define the addresses of blacklist sites (free or fee-based) you want the GWIA to check for blacklisted hosts. If a host is included in a site’s blacklist, the GWIA does not accept messages from it.
Syntax: --rbl bl.spamcop.net
This switch corresponds to the Blacklist Addresses list (GWIA object > Access Control > Blacklists). For details about this setting, see Real-Time Blacklists.