All Apps and Add-ons

Which IP addresses to put in reputation.conf?

richnavis
Contributor

I have a simple question... Does the reputation.conf file in the Splunk App for Exchange require that I list the INTERNAL or EXTERNAL IP addresses in the file.

0 Karma
1 Solution

skylasam_splunk
Splunk Employee
Splunk Employee

External (public) IP addresses of your outbound mail servers are the ones that need to be in the reputation.conf file

View solution in original post

skylasam_splunk
Splunk Employee
Splunk Employee

External (public) IP addresses of your outbound mail servers are the ones that need to be in the reputation.conf file

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...