Ironport Systems, Inc.

Peter Schlampp

Paul J Clegg

Patrick Richard Peterson

Scott Banister

Daniel A Quinlan

Craig Sprosts

Charles S Slater

Shun Chen

Robert Brahms

Eric C Huss

Brennan H Evans

Krishna Srinivasan

An approach for monitoring electronic messages received at a server is disclosed. Message information for a plurality of electronic messages received at the server is determined and stored in a queue. Based on the queue, aggregate information is generated for a particular network address of a plurality of network addresses. The aggregate information is generated for each time interval of a plurality of time intervals and displayed for the plurality of time intervals. In some implementations, input from a user is received, and based on the input, a modification is made regarding how future electronic messages from the particular network address are handled by the server. In some implementations, combined aggregate information is generated for two or more network addresses and then displayed. In some implementations, aggregate policy information indicating which policies have been applied to the electronic messages is generated and displayed for the time intervals.

Monitoring the flow of messages received at a server

A method and apparatus for managing connections, email messages, and directory harvest attacks at a server is disclosed. The server maintains a count of a parameter and compares the count to a specified maximum value, such that when the specified maximum value is met or exceeded, an action is taken by the server to limit the connections, email messages, or directory harvest attack. Actions include controlling the number of connections to the server from senders, controlling the flow of email messages injected to the server by senders, and controlling when rejection response messages are sent for invalid recipient email addresses to thwart a directory harvest attack. Senders are identified by one or more sender identifiers, which can be used to group senders together so that the same maximum value is applied collectively to all senders in the group.

Managing connections, messages, and directory harvest attacks at a server

Message delivery approaches are disclosed in which senders can define filters with associated actions for evaluation in relation to specified messages. After creating and storing filters with specified actions, senders dispatch messages to a processing system, which evaluates the filters against the messages. If a match occurs, the processing system performs the specified actions on the messages. In one embodiment, the processing system can send the same message multiple times to different receiving systems, and can modify the source IP address and outbound interface of the message for each receiving system. Further, the source IP address or interface may be modified by a filter in response to external events, such as a receiving system blocking another copy of the message. In this way, a single message processing system can appear as a large number of virtual message sending units, thereby increasing the chance that a particular message will arrive at its destination without blocking by message blocking or filtering technologies at the receiver. For bulk mailers, different filters can be associated with different communication campaigns.

Electronic message delivery using a virtual gateway approach

Message delivery approaches in which senders define filters with associated actions for evaluation in relation to specified messages. After creating and storing filters with specified actions, senders dispatch messages to a processing system, which evaluates the filters against the messages. If a match occurs, the processing system performs the specified actions on the messages. The processing system may send the same message multiple times to different receiving systems, and may modify the source IP address and outbound interface of the message for each receiving system. The source IP address or interface may be modified by a filter in response to external events, such as a receiving system blocking another copy of the message. A single message processing system can appear as a large number of virtual message sendingunits.

Electronic message delivery using an alternate source approach

Growing community of inventors

San Francisco, CA, United States of America

Peter Schlampp