Re: ISA Server Alerts: SMTP

Thank you, Jim!  (NOOP command length was only 6. I so would not have
known it can be up to 20, though).

Yes, we are using Exchange.  Do I have to add "XEXCH" ("XEXCH50"?) to
the SMTP filter?  If so, what should be its maximum length?

ISA Also sends "unknown SMTP command" e-mails for the following 4
commands:
   X-LINK2STATE DROP
   X-LINK2STATE LAST
   X-EXPS GSSAPI
   UIT
   
Is it safe to add them to the SMTP filter in ISA too?

I don't mean to ask so many follow-up questions -- any good reference so
I learn on these "SMTP Filer" issues?

Alfonso

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Tuesday, October 29, 2002 10:41 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server Alerts: SMTP

http://www.ISAserver.org


Change the NOOP command length to 20 (Credit - Tim Mullen)
If you're not using Exchange, then anyone hitting your SMTP server with
XEXCH-based commands is acting inappropriately.

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://isaserver.org/pages/author_index.asp?aut=3
 http://isatools.org
 Read the help / books / articles!

----- Original Message -----
From: "Alfonso Lopez de Ayala" <alopezdeayala@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, October 29, 2002 7:30 AM
Subject: [isalist] ISA Server Alerts: SMTP


http://www.ISAserver.org


Hi! ISA e-mails me dozens of alerts every day relating to SMTP. Is that
normal, or should I configure something different?

Alerts I get are of two types:

ISA Server alert: The SMTP command exceeded its allowed length
   ISA Server name: ISA-SVR-1
   NOOP

or

ISA Server alert: An unknown SMTP command
   ISA Server name: ISA-SVR-1
   XEXCH50 1840

Thanks so much in advance for any insight into this!

Alfonso
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
alopezdeayala@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: