Hi Greg, I do appreciate that! Was really strange. I think I need to video tape everything I do while I work on my machines. That way if I do something I'm not supposed to be doing I can get it fixed! Joseph ----- Original Message ----- From: "Greg Mulholland" <gregstelatel@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, April 14, 2004 4:49 PM Subject: [isalist] RE: Message Screener http://www.ISAserver.org I was sending you good thoughts in my sleep. :) Greg Mulholland Stelatel Communications Unit 3 641-643 Centre Rd Bentleigh, VIC Phone: (03) 9576-5699 Fax: (03) 9576-5899 gregstelatel@xxxxxxxxxxx www.stelatel.com -----Original Message----- From: cismic [mailto:cismic@xxxxxxx] Sent: Thursday, 15 April 2004 9:46 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Message Screener http://www.ISAserver.org By the way thanks for all the help! ----- Original Message ----- From: "cismic" <cismic@xxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, April 14, 2004 4:41 PM Subject: [isalist] RE: Message Screener http://www.ISAserver.org Hi Thomas, Very good news! All with the message screen is now finally working! On my External ISA server: 1. I had to remove the client set that pointed to my forwarding SMTP server. Not sure why I had to do this but I did. As a test I added it back again and that definately stopped the incoming mail 2. Double check the dcomcnfg to make sure all was set right 3. did netstat -a rather then -an so I could see WAIT_TIME and if it were connecting to outside source On my STMP forwarder: 1. Did the noamal setup including to allow all to forward on the list below but had no items listed. 2. Made sure that *.domain.com were listed for all my domains 3. did netstat -a rather then -an so I could see WAIT_TIME and if it were connecting to outside source On my internal exchange machine. 1. Under message formats added *.domain.com for all my domains I'm happy. Joseph ----- Original Message ----- From: "cismic" <cismic@xxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, April 14, 2004 8:30 AM Subject: [isalist] RE: Message Screener http://www.ISAserver.org Hi Thomas, I think that there is something to what you said. Something is going on with the Message Screener! I have 2 IP ADDRESS on my outside nic 1 address I use for the web sites and the other I want to use for mail. Was working until I added the message screener. Bugs me to not find it. There are no errors in the logs and in the packet filter log port 25 SYN is still being blocked. No DCOM errors at all. The interesting things is I'm listening for 198.162.0.1 WEBS and 198.162.0.2 MAIL and the log entry shows 65.23.67.113 198.162.0.2 25 SYN 198.162.0.1 BLOCKED but gets blocked on 198.162.0.1 I'll work on this later today. Thanks again for all the help! Joseph ----- Original Message ----- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, April 14, 2004 8:19 AM Subject: [isalist] RE: Message Screener http://www.ISAserver.org Hi Rob, This is a case study in the truism "correlation is not causation" I've installed the SMTP message screener on probably hundreds of Win2003 boxes and never had anything fail, and it always works too :) I think there's something else going on here, might be worth checking the Event Viewer for some clues. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA 2004 Beta - Get it now! http://www.microsoft.com/isaserver/beta/default.asp ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Rob Moore [mailto:RMoore@xxxxxxxx] Sent: Wednesday, April 14, 2004 10:11 AM To: [ISAserver.org Discussion List] Subject: [isalist] Message Screener http://www.ISAserver.org Hello again-- Things have been going relatively well with my new ISA 2000 setup. Until this morning. I have ISA 2000 running standalone on a Windows 2003 box. I've been having trouble getting the Message Screener to work. I installed IIS on the ISA box on Monday. Mail flows to my test domain. But the message screener doesn't seem to work. I set, among other extensions, a made up extension "*.xxx" to be deleted. They go through anyway. I thought maybe I needed to install the Message Screener itself. I ran the installer from the CD, installed Message Screener, and rebooted. That broke a bunch of stuff. I tried re-installing the ISA SP1, Feature Pack 1, and the hot fix isahf255.exe. Most everything went back to normal, except: 1. The Message Screener still doesn't work. 2. When I use the ISA server as the default gateway for our main internal DNS server, DNS stops working (that is, no machines, including the main internal DNS server, will find any external sites). As long as our main internal DNS server has our old firewall as its gateway, all the other machines can use the ISA server as their gateway with no problem. (I don't know for certain that this behavior just started with my Message Screener re-install, as I just switched the gateway on the DNS server this morning.) Any idea what might be up with these two things? Thanks, Rob ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: cismic@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: cismic@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: cismic@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gregstelatel@xxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: cismic@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')