RE: Message Screener

  • From: "Greg Mulholland" <gregstelatel@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 15 Apr 2004 10:30:13 +1000

I totally here ya, its amplified a thousand times once the clock hits 12:00
midnight. You know you should leave it till the morning but you cant bear to
sleep when its not working.



Greg Mulholland
Stelatel Communications
Unit 3 641-643 Centre Rd
Bentleigh, VIC
Phone: (03) 9576-5699
Fax:   (03) 9576-5899
gregstelatel@xxxxxxxxxxx
www.stelatel.com



-----Original Message-----
From: cismic [mailto:cismic@xxxxxxx]
Sent: Thursday, 15 April 2004 10:27 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Message Screener


http://www.ISAserver.org

Hi Greg,
I do appreciate that!  Was really strange.  I think I need to video tape
everything I do while I work on my machines. That way if I do something
I'm not supposed to be doing I can get it fixed!

Joseph
----- Original Message -----
From: "Greg Mulholland" <gregstelatel@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, April 14, 2004 4:49 PM
Subject: [isalist] RE: Message Screener


http://www.ISAserver.org

I was sending you good thoughts in my sleep. :)

Greg Mulholland
Stelatel Communications
Unit 3 641-643 Centre Rd
Bentleigh, VIC
Phone: (03) 9576-5699
Fax:   (03) 9576-5899
gregstelatel@xxxxxxxxxxx
www.stelatel.com



-----Original Message-----
From: cismic [mailto:cismic@xxxxxxx]
Sent: Thursday, 15 April 2004 9:46 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Message Screener


http://www.ISAserver.org

By the way thanks for all the help!

----- Original Message -----
From: "cismic" <cismic@xxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, April 14, 2004 4:41 PM
Subject: [isalist] RE: Message Screener


http://www.ISAserver.org

Hi Thomas,

Very good news!  All with the message screen is now finally working!
On my External ISA server:
1.  I had to remove the client set that pointed to
my forwarding SMTP server. Not sure why I had to do this but I did.
As a test I added it back again and that definately stopped the incoming
mail
2. Double check the dcomcnfg to make sure all was set right
3.  did netstat -a rather then -an so I could see WAIT_TIME and if
     it were connecting to outside source

On my STMP forwarder:
1.  Did the noamal setup including to allow all to forward on the list below
but had no items listed.
2.  Made sure that *.domain.com were listed for all my domains
3.  did netstat -a rather then -an so I could see WAIT_TIME and if
     it were connecting to outside source

On my internal exchange machine.
1.  Under message formats added *.domain.com for all my domains

I'm happy.
Joseph

----- Original Message -----
From: "cismic" <cismic@xxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, April 14, 2004 8:30 AM
Subject: [isalist] RE: Message Screener


http://www.ISAserver.org

Hi Thomas,

I think that there is something to what you said. Something is going on with
the
Message Screener!  I have 2 IP ADDRESS on my outside nic

1 address I use for the web sites and the other I want to use for mail.
Was working until I added the message screener.  Bugs me to not
find it.  There are no errors in the logs and in the packet filter log
port 25 SYN is still being blocked. No DCOM errors at all.

The interesting things is I'm listening for 198.162.0.1 WEBS
and 198.162.0.2 MAIL and the log entry shows
65.23.67.113 198.162.0.2   25 SYN 198.162.0.1 BLOCKED  but gets blocked on
198.162.0.1
I'll work on this later today.

Thanks again for all the help!

Joseph
----- Original Message -----
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, April 14, 2004 8:19 AM
Subject: [isalist] RE: Message Screener


http://www.ISAserver.org

Hi Rob,

This is a case study in the truism "correlation is not causation"

I've installed the SMTP message screener on probably hundreds of Win2003
boxes and never had anything fail, and it always works too :)

I think there's something else going on here, might be worth checking
the Event Viewer for some clues.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp




-----Original Message-----
From: Rob Moore [mailto:RMoore@xxxxxxxx]
Sent: Wednesday, April 14, 2004 10:11 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Message Screener


http://www.ISAserver.org

Hello again--

Things have been going relatively well with my new ISA 2000 setup. Until
this morning.

I have ISA 2000 running standalone on a Windows 2003 box. I've been
having trouble getting the Message Screener to work. I installed IIS on
the ISA box on Monday. Mail flows to my test domain. But the message
screener doesn't seem to work. I set, among other extensions, a made up
extension "*.xxx" to be deleted. They go through anyway. I thought maybe
I needed to install the Message Screener itself. I ran the installer
from the CD, installed Message Screener, and rebooted. That broke a
bunch of stuff. I tried re-installing the ISA SP1, Feature Pack 1, and
the hot fix isahf255.exe. Most everything went back to normal, except:
1. The Message Screener still doesn't work.
2. When I use the ISA server as the default gateway for our main
internal DNS server, DNS stops working (that is, no machines, including
the main internal DNS server, will find any external sites). As long as
our main internal DNS server has our old firewall as its gateway, all
the other machines can use the ISA server as their gateway with no
problem. (I don't know for certain that this behavior just started with
my Message Screener re-install, as I just switched the gateway on the
DNS server this morning.)

Any idea what might be up with these two things?

Thanks,
Rob

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gregstelatel@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gregstelatel@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: