I think you should concentrate on the exception route. Signed messages come from the client and as such arrive at the server signed. Any change will invalidate the signature. Al _____ From: Stelley, Douglas [mailto:dstelley@xxxxxxx] Sent: Monday, March 01, 2004 10:54 AM To: [ExchangeList] Subject: [exchangelist] RE: digital cert vs. disclaimer http://www.MSExchange.org/ If installed GFI Essentials on the Exchange server & had it only do the disclaimer, wouldn't it also attach the disclaimer after it was signed? Or maybe I should ask how I could set up to not send signed mail through that gateway... _____ From: Mulnick, Al [mailto:Al.Mulnick@xxxxxxxxxx] Sent: Monday, March 01, 2004 9:19 AM To: [ExchangeList] Subject: [exchangelist] RE: digital cert vs. disclaimer http://www.MSExchange.org/ I have plenty of ideas, but you may not like any of them. What needs to happen is that the confidential mails either need to be excluded from the footer or you will need to add the cert signature after the disclaimer. Either way would be different than what you're doing now and would need a different architecture or a signature mechanism with more intelligence to realize a message shouldn't be changed if it is signed. Al _____ From: Stelley, Douglas [mailto:dstelley@xxxxxxx] Sent: Monday, March 01, 2004 8:43 AM To: [ExchangeList] Subject: [exchangelist] digital cert vs. disclaimer http://www.MSExchange.org/ We have Exchange 2000 and use a windows box as our mail gateway for the outside world. On the gateway, we use GFI's Security & Essentials programs for screening. It really works well for us. Also, we Use GFI to attach our standard disclaimer, and like that as well, BUT. Now we have to implement certificates on some of our "confidential" mail. When I send test messages that are signed, the gateway attaches the disclaimer, and voila, now the massage has been altered. So then end recipient thinks the mail is bad. Anyone have any ideas? I kind of need both items (the disclaimer & the certificate...) Doug ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ Confidentiality Notice: The information contained in this message may be legally privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any release, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error please notify the author immediately by replying to this message and deleting the original message. Thank you. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------