RE: GFI
- From: "David Vella" <davidv@xxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 10 Mar 2003 17:41:38 +0100
Hi John,
I am the MailEssentials and MailSecurity product manager and have been
following this thread about GFI.
As regards the Microsoft KB article, we are currently contacting Microsoft
about it as we came to know about this article from this same list, we where
never notified by Microsoft about it and reading through the article we can see
that parts of it does not make any sense, we will be checking who is the author
of the article to confirm validity and if the appropriate steps has been taken
before adding the article.
Some errors in the article are:
"Mail Essentials contains an add-on named Mail Security"
MailSecurity is not an add-on of MailEssentials, they are 2 completely
different products.
"Mail Security installs an outbound SMTP sink that verifies the
validity of the sender address"
This article applies to Exchange 2000, however when MailSecurity is
installed on an Exchange 2000 machine it does not in any way touch any sinks,
this is because when installed on the same machine as Exchange 2000 we use the
Microsoft VS API interface as documented by Microsoft.
We have tested both products to see if we can reproduce what this article is
saying just to be on the safe side however we did not manage to reproduce
anything. The above points also show that the author of the article did not do
real research on the problem.
We will continue to follow-up this issue with Microsoft to check what they
exactly mean by it.
regards,
David Vella - GFI Software Ltd. - www.gfi.com
Messaging, Content Security & Network security software
GFI: FAXmaker - LANguard - MailSecurity - DownloadSecurity
-----Original Message-----
From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
Sent: Saturday, March 08, 2003 1:16 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] GFI
http://www.ISAserver.org
Interesting read:
In some scenarios, the sink bindings may exist in the Exchange 2000 Server
metabase but the sink is not properly registered in the registry. When this
occurs, the SMTP protocol does not create the sink when it tries to process the
"MAIL FROM" command. As a result Exchange 2000 Server drops the connection, and
the outgoing mail is not processed.
This issue may occur when a third party program, for example GFI Mail
Essentials, is installed and then incorrectly or incompletely removed. GFI Mail
Essentials contains an add-on named Mail Security. Mail Security installs an
outbound SMTP sink that verifies the validity of the sender address. If
improperly removed, the sink may remain although the sink is no longer
correctly registered. When the "MAIL FROM" command is initiated by Exchange
2000 Server, the sink fails and Exchange 2000 Server drops the connection.
The third-party products that are discussed in this article are manufactured by
companies that are independent of Microsoft. Microsoft makes no warranty,
implied or otherwise, regarding the performance or reliability of these
products.
From http://support.microsoft.com/default.aspx?scid=kb;en-us;812292
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
davidv@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
This mail was content checked for malicious code and viruses
by GFI MailSecurity. GFI MailSecurity provides email content
checking, exploit detection and anti-virus for Exchange &
SMTP servers. Spam, viruses, dangerous attachments and
offensive content are removed automatically. Key features
include: Multiple virus engines; Email content & attachment
checking; Exploit shield - email intrusion detection & defence;
Email threats engine - analyses & defuses HTML scripts,
.exe files & more.
In addition to GFI MailSecurity, GFI also produces the GFI
FAXmaker fax server & GFI LANguard network security product
ranges. For more information on our products, please visit
http://www.gfi.com. This disclaimer was sent by GFI MailEssentials
for Exchange/SMTP.
Other related posts:
