Managing connections and messages at a server by associating different actions for both different senders and different recipients

• US 20060010215A1
• Filed: 05/27/2005
• Published: 01/12/2006
• Est. Priority Date: 05/29/2004
• Status: Active Grant

• Current Assignee: Ironport Systems (Cisco Systems, Inc.)
• Original Assignee: Ironport Systems (Cisco Systems, Inc.)
• Inventors: Sprosts, Craig, Quinlan, Daniel, Huss, Eric C., Chen, Shun, Clegg, Paul J., Brahms, Robert
• Granted Patent: US 7,873,695 B2
• Time in Patent Office: Days
• US Class Current: 709/206
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking

Abstract

A method and apparatus for managing connections and messages at a server by associating different actions for both different senders and different recipients is disclosed. The server manages connections from different senders by receiving incoming connections from the different senders and determining sender identifiers for the incoming connections. The server inspects a mapping of sender identifiers to actions to identify which action should be applied to each incoming connection. The server applies the actions, such as accepting the connection, rejecting the connection, relaying the connection, or refusing the connection. Also, the server manages electronic messages for different recipients by determining recipient identifiers for the electronic messages. The server inspects a mapping of recipient identifiers to actions to identify which action should be applied for the recipients of the email messages. The server applies the actions, such as accepting or rejecting the email message for delivery to a recipient.

Claims

1. A method for managing connections from different senders and email messages for different recipients at a message transfer agent (MTA), comprising:

receiving at said server a first incoming connection from a first sender and a second incoming connection from a second sender, wherein said first sender is different than said second sender;

based on said first incoming connection, determining a first sender identifier of a plurality of sender identifiers;

based on said second incoming connection, determining a second sender identifier of said plurality of sender identifiers;

based on said first sender identifier, inspecting a first mapping to identify a first accept action of a first plurality of actions, wherein said first mapping associates said plurality of sender identifiers with said first plurality of actions;

based on said second sender identifier, inspecting said first mapping to identify a first reject action of said first plurality of actions;

based on said first accept action, receiving one or more email messages over a first connection based on said first incoming connection;

based on said first reject action, terminating a second connection based on said second incoming connection without receiving any email messages over said second connection;

receiving at said MTA a first email message for a first recipient and a second email message for a second recipient, wherein said first recipient is different than said second recipient;

based on said first email message, determining a first recipient identifier of a plurality of recipient identifiers;

based on said second email message, determining a second recipient identifier of said plurality of recipient identifiers;

based on said first recipient identifier, inspecting a second mapping to identify a second accept action of a second plurality of actions, wherein said second mapping associates said plurality of recipient identifiers with said second plurality of actions;

based on said second recipient identifier, inspecting said second mapping to identify a second reject action of said second plurality of actions;

based on said second accept action, accepting said first email message for delivery to said first recipient; and

based on said second reject action, rejecting said second email message for delivery to said second recipient.

2. A method for managing connections for receiving electronic messages at a server from different senders, comprising:

receiving at said server a first incoming connection from a first sender and a second incoming connection from a second sender, wherein said first sender is different than said second sender;

based on said first incoming connection, determining a first sender identifier of a plurality of sender identifiers;

based on said second incoming connection, determining a second sender identifier of said plurality of sender identifiers;

based on said first sender identifier, inspecting a mapping to identify a first action of a plurality of actions, wherein said mapping is stored on said server and associates said plurality of sender identifiers with said plurality of actions;

based on said second sender identifier, inspecting said mapping to identify a second action of said plurality of actions;

applying said first action to said first incoming connection; and

applying said second action to said second incoming connection.

3. A method as recited in claim 2, wherein said first sender identifier and said second sender identifier are each selected from the group consisting of a first set of two or more network addresses, a second set of two or more Internet Protocol (IP) addresses, a partial IP address, a first range of IP addresses, a fully qualified domain name (FQDN), a partial FQDN, a classless inter-domain routing (CIDR) block, a partial CIDR block, a subnet, a network owner, an organization identifier, a reputation score, and a second range of reputation scores.

4. A method as recited in claim 2, wherein:

said first sender identifier is a first group sender identifier that is associated with a first individual sender identifier and a second individual sender identifier; and

said second sender identifier is a second group sender identifier that is associated with a third individual sender identifier and a fourth individual sender identifier; and

said first individual sender identifier, said second individual sender identifier, said third individual sender identifier, and said fourth individual sender identifier are each selected from the group consisting of a network address, an Internet Protocol (IP) address, a partial IP address, a first range of IP addresses, a primary domain, a subdomain, a fully qualified domain name (FQDN), a partial FQDN, a classless inter-domain routing (CIDR) block, a partial CIDR block, a subnet, an organization identifier, a network owner, a reputation score, and a second range of reputation scores.

5. A method as recited in claim 2, wherein:

said mapping is an ordered listing of two or more rules, wherein;

each rule of said two or more rules associates a particular sender identifier of the plurality of sender identifiers with a particular action of the plurality of actions; and

said first sender identifier is included in both a first rule and a second rule rules of said two or more rules, wherein said first rule is listed before said second rule in said ordered listing of said two or more rules;

inspecting said mapping to identify said first action comprises;

based on said first sender identifier, searching said ordered listing to identify said first rule; and

identifying said first action as said particular action associated with said first sender identifier in said first rule.

6. A method as recited in claim 2, wherein:

said first action is associated with a parameter that is selected from the group consisting of a first rate of recipients to be accepted for said first sender identifier, a second rate of electronic messages to be accepted for said first sender identifier, an electronic message size for said first sender identifier, and a number recipients per electronic message for said first sender identifier; and

the method further comprises;

based on said first incoming connection, establishing a first connection;

receiving an electronic message over said first connection;

identifying a recipient of said electronic message;

based on said recipient matching a specified recipient, delivering said electronic message to said recipient even though said electronic message would otherwise not be delivered based said parameter.

7. A method as recited in claim 2, wherein said first action and said second action are each selected from the group consisting of an accept action, a relay action, a reject action, and a refuse action.

8. A method for managing electronic messages received at a server for different recipients, comprising:

receiving at said server a first electronic message for a first recipient and a second electronic message for a second recipient, wherein said first recipient is different than said second recipient;

based on said first electronic message, determining a first recipient identifier of a plurality of recipient identifiers;

based on said second electronic message, determining a second recipient identifier of said plurality of recipient identifiers;

based on said first recipient identifier, inspecting a mapping to identify a first action of a plurality of actions, wherein said mapping is stored on said server and associates said plurality of recipient identifiers with said plurality of actions;

based on said second recipient identifier, inspecting said mapping to identify a second action of said plurality of actions;

applying said first action to said first electronic message; and

applying said second action to said second electronic message.

9. A method as recited in claim 8, wherein said first recipient identifier and said second recipient identifier are each selected from the group consisting of a first set of two or more full electronic addresses, a partial electronic address, a fully qualified domain name (FQDN), a partial FQDN, a second set of two or more usernames, and a partial username.

10. A method as recited in claim 8, wherein:

said mapping is an ordered listing of two or more rules, wherein;

each rule of said two or more rules associates a particular recipient identifier of the plurality of recipient identifiers with a particular action of the plurality of actions; and

said first recipient identifier is included in at least a first rule and a second rule of said two or more rules, wherein said first rule is listed before said second rule in said ordered listing of two or more rules;

inspecting said mapping to identify said first action comprises;

based on said first recipient identifier, searching said ordered listing to identify said first rule based on said first rule being listed before said second rule; and

identifying said first action as said particular action associated with said first recipient identifier in said first rule.

11. A method as recited in claim 8, wherein:

said first action is associated with a parameter that is selected from the group consisting of a response code, a response text, and a banner text; and

the method further comprises;

based on said parameter, sending a response.

12. A method as recited in claim 8, wherein said first action and said second action are each selected from the group consisting of an accept action and a reject action.

13. A machine-readable medium carrying one or more sequences of instructions for managing connections for receiving electronic messages at a server from different senders, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

receiving at said server a first incoming connection from a first sender and a second incoming connection from a second sender, wherein said first sender, is different than said second sender;

based on said first incoming connection, determining a first sender identifier of a plurality of sender identifiers;

based on said second incoming connection, determining a second sender identifier of said plurality of sender identifiers;

based on said first sender identifier, inspecting a mapping to identify a first action of a plurality of actions, wherein said mapping is stored on said server and associates said plurality of sender identifiers with said plurality of actions;

based on said second sender identifier, inspecting said mapping to identify a second action of said plurality of actions;

applying said first action to said first incoming connection; and

applying said second action to said second incoming connection.

14. A machine-readable medium as recited in claim 13, wherein said first sender identifier and said second sender identifier are each selected from the group consisting of a first set of two or more network addresses, a second set of two or more Internet Protocol (IP) addresses, a partial IP address, a first range of IP addresses, a fully qualified domain name (FQDN), a partial FQDN, a classless inter-domain routing (CIDR) block, a partial CIDR block, a subnet, a network owner, an organization identifier, a reputation score, and a second range of reputation scores.

15. A machine-readable medium as recited in claim 13, wherein:

said first sender identifier is a first group sender identifier that is associated with a first individual sender identifier and a second individual sender identifier; and

said second sender identifier is a second group sender identifier that is associated with a third individual sender identifier and a fourth individual sender identifier; and

said first individual sender identifier, said second individual sender identifier, said third individual sender identifier, and said fourth individual sender identifier are each selected from the group consisting of a network address, an Internet Protocol (IP) address, a partial IP address, a first range of IP addresses, a primary domain, a subdomain, a fully qualified domain name (FQDN), a partial FQDN, a classless inter-domain routing (CIDR) block, a partial CIDR block, a subnet, an organization identifier, a network owner, a reputation score, and a second range of reputation scores.

16. A machine-readable medium as recited in claim 13, wherein:

said mapping is an ordered listing of two or more rules, wherein;

each rule of said two or more rules associates a particular sender identifier of the plurality of sender identifiers with a particular action of the plurality of actions; and

said first sender identifier is included in both a first rule and a second rule rules of said two or more rules, wherein said first rule is listed before said second rule in said ordered listing of said two or more rules;

wherein the instructions for inspecting said mapping to identify said first action further comprise instructions which, when executed by the one or more processors, cause the one or more processors to perform the steps of;

based on said first sender identifier, searching said ordered listing to identify said first rule; and

identifying said first action as said particular action associated with said first sender identifier in said first rule.

17. A machine-readable medium as recited in claim 13, wherein:

said first action is associated with a parameter that is selected from the group consisting of a first rate of recipients to be accepted for said first sender identifier, a second rate of electronic messages to be accepted for said first sender identifier, an electronic message size for said first sender identifier, and a number recipients per electronic message for said first sender identifier; and

the machine-readable medium further comprises instructions which, when executed by the one or more processors, cause the one or more processors to perform the steps of;

based on said first incoming connection, establishing a first connection;

receiving an electronic message over said first connection;

identifying a recipient of said electronic message;

based on said recipient matching a specified recipient, delivering said electronic message to said recipient even though said electronic message would otherwise not be delivered based said parameter.

18. A machine-readable medium as recited in claim 13, wherein said first action and said second action are each selected from the group consisting of an accept action, a relay action, a reject action, and a refuse action.

19. A machine-readable medium carrying one or more sequences of instructions for managing electronic messages received at a server for different recipients, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

receiving at said server a first electronic message for a first recipient and a second electronic message for a second recipient, wherein said first recipient is different than said second recipient;

based on said first electronic message, determining a first recipient identifier of a plurality of recipient identifiers;

based on said second electronic message, determining a second recipient identifier of said plurality of recipient identifiers;

based on said first recipient identifier, inspecting a mapping to identify a first action of a plurality of actions, wherein said mapping is stored on said server and associates said plurality of recipient identifiers with said plurality of actions;

based on said second recipient identifier, inspecting said mapping to identify a second action of said plurality of actions;

applying said first action to said first electronic message; and

applying said second action to said second electronic message.

20. A machine-readable medium as recited in claim 19, wherein said first recipient identifier and said second recipient identifier are each selected from the group consisting of a first set of two or more full electronic addresses, a partial electronic address, a fully qualified domain name (FQDN), a partial FQDN, a second set of two or more usernames, and a partial username.

21. A machine-readable medium as recited in claim 19, wherein:

said mapping is an ordered listing of two or more rules, wherein;

each rule of said two or more rules associates a particular recipient identifier of the plurality of recipient identifiers with a particular action of the plurality of actions; and

said first recipient identifier is included in at least a first rule and a second rule of said two or more rules, wherein said first rule is listed before said second rule in said ordered listing of two or more rules;

wherein the instructions for inspecting said mapping to identify said first action further comprise instructions which, when executed by the one or more processors, cause the one or more processors to perform the steps of;

based on said first recipient identifier, searching said ordered listing to identify said first rule based on said first rule being listed before said second rule; and

identifying said first action as said particular action associated with said first recipient identifier in said first rule.

22. A machine-readable medium as recited in claim 19, wherein:

said first action is associated with a parameter that is selected from the group consisting of a response code, a response text, and a banner text; and

the machine-readable medium further comprises instructions which, when executed by the one or more processors, cause the one or more processors to perform the step of;

based on said parameter, sending a response.

23. A machine-readable medium as recited in claim 19, wherein said first action and said second action are each selected from the group consisting of an accept action and a reject action.

24. An apparatus comprising:

a processor; and

a memory coupled to the processor, the memory containing one or more sequences of instructions for managing connections for receiving electronic messages at a server from different senders, wherein execution of the one or more sequences of instructions by the processor causes the processor to perform the steps of;

receiving at said server a first incoming connection from a first sender and a second incoming connection from a second sender, wherein said first sender is different than said second sender;

based on said first incoming connection, determining a first sender identifier of a plurality of sender identifiers;

based on said second incoming connection, determining a second sender identifier of said plurality of sender identifiers;

based on said first sender identifier, inspecting a mapping to identify a first action of a plurality of actions, wherein said mapping is stored on said server and associates said plurality of sender identifiers with said plurality of actions;

based on said second sender identifier, inspecting said mapping to identify a second action of said plurality of actions;

applying said first action to said first incoming connection; and

applying said second action to said second incoming connection.

25. An apparatus as recited in claim 24, wherein said first sender identifier and said second sender identifier are each selected from the group consisting of a first set of two or more network addresses, a second set of two or more Internet Protocol (IP) addresses, a partial IP address, a first range of IP addresses, a fully qualified domain name (FQDN), a partial FQDN, a classless inter-domain routing (CIDR) block, a partial CIDR block, a subnet, a network owner, an organization identifier, a reputation score, and a second range of reputation scores.

26. An apparatus as recited in claim 24, wherein:

said first sender identifier is a first group sender identifier that is associated with a first individual sender identifier and a second individual sender identifier; and

said second sender identifier is a second group sender identifier that is associated with a third individual sender identifier and a fourth individual sender identifier; and

said first individual sender identifier, said second individual sender identifier, said third individual sender identifier, and said fourth individual sender identifier are each selected from the group consisting of a network address, an Internet Protocol (IP) address, a partial IP address, a first range of IP addresses, a primary domain, a subdomain, a fully qualified domain name (FQDN), a partial FQDN, a classless inter-domain routing (CIDR) block, a partial CIDR block, a subnet, an organization identifier, a network owner, a reputation score, and a second range of reputation scores.

27. An apparatus as recited in claim 24, wherein:

said mapping is an ordered listing of two or more rules, wherein;

each rule of said two or more rules associates a particular sender identifier of the plurality of sender identifiers with a particular action of the plurality of actions; and

said first sender identifier is included in both a first rule and a second rule rules of said two or more rules, wherein said first rule is listed before said second rule in said ordered listing of said two or more rules;

wherein the instructions for inspecting said mapping to identify said first action further comprise instructions which, when executed by the processor, cause the processor to perform the steps of;

based on said first sender identifier, searching said ordered listing to identify said first rule; and

identifying said first action as said particular action associated with said first sender identifier in said first rule.

28. An apparatus as recited in claim 24, wherein:

said first action is associated with a parameter that is selected from the group consisting of a first rate of recipients to be accepted for said first sender identifier, a second rate of electronic messages to be accepted for said first sender identifier, an electronic message size for said first sender identifier, and a number recipients per electronic message for said first sender identifier; and

the memory further contains further contains one or more sequences of instructions which, when executed by the processor, cause the processor to perform the steps of;

based on said first incoming connection, establishing a first connection;

receiving an electronic message over said first connection;

identifying a recipient of said electronic message;

based on said recipient matching a specified recipient, delivering said electronic message to said recipient even though said electronic message would otherwise not be delivered based said parameter.

29. An apparatus as recited in claim 24, wherein said first action and said second action are each selected from the group consisting of an accept action, a relay action, a reject action, and a refuse action.

30. An apparatus comprising:

a processor; and

a memory coupled to the processor, the memory containing one or more sequences of instructions for managing electronic messages received at a server for different recipients, wherein execution of the one or more sequences of instructions by the processor causes the processor to perform the steps of;

receiving at said server a first electronic message for a first recipient and a second electronic message for a second recipient, wherein said first recipient is different than said second recipient;

based on said first electronic message, determining a first recipient identifier of a plurality of recipient identifiers;

based on said second electronic message, determining a second recipient identifier of said plurality of recipient identifiers;

based on said first recipient identifier, inspecting a mapping to identify a first action of a plurality of actions, wherein said mapping is stored on said server and associates said plurality of recipient identifiers with said plurality of actions;

based on said second recipient identifier, inspecting said mapping to identify a second action of said plurality of actions;

applying said first action to said first electronic message; and

applying said second action to said second electronic message.

31. An apparatus as recited in claim 30, wherein said first recipient identifier and said second recipient identifier are each selected from the group consisting of a first set of two or more full electronic addresses, a partial electronic address, a fully qualified domain name (FQDN), a partial FQDN, a second set of two or more usernames, and a partial username.

32. An apparatus as recited in claim 30, wherein:

said mapping is an ordered listing of two or more rules, wherein;

each rule of said two or more rules associates a particular recipient identifier of the plurality of recipient identifiers with a particular action of the plurality of actions; and

said first recipient identifier is included in at least a first rule and a second rule of said two or more rules, wherein said first rule is listed before said second rule in said ordered listing of two or more rules;

wherein the instructions for inspecting said mapping to identify said first action further comprise instructions which, when executed by the processor, cause the processor to perform the steps of;

based on said first recipient identifier, searching said ordered listing to identify said first rule based on said first rule being listed before said second rule; and

identifying said first action as said particular action associated with said first recipient identifier in said first rule.

33. An apparatus as recited in claim 30, wherein:

said first action is associated with a parameter that is selected from the group consisting of a response code, a response text, and a banner text; and

the memory further contains one or more sequences of instructions which, when executed by the processor, cause the processor to perform the step of;

based on said parameter, sending a response.

34. An apparatus as recited in claim 30, wherein said first action and said second action are each selected from the group consisting of an accept action and a reject action.