Re: ISA Server Alerts: SMTP
- From: "Quillman Shawn (RBNA/CIT7)" <Shawn.Quillman@xxxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 29 Oct 2002 16:33:28 -0500
Might this help?
X-LINK2STATE is used to transfer link state info betweeen Exchange routing
groups -
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsolutio
ns/guide/glossary.asp
X-EXPS GSSAPI looks like an extension to say that GSSAPI is the supported
security mechanism (or something like that, hey it's a guess). Similar to
the HTTP PROXY-AUTHENTICATE and WWW-AUTHENTICATE headers. See
http://docs.sun.com/db/doc/806-3814/6jcugr7cc?q=GSSAPI&a=view for an
explanation of GSSAPI. It's basically a wrapper around other security
mechanisms (Kerberos, etc). Maybe EXPS GSSAPI = (EXP)ect (S)ecurity
GSSAPI???
UIT - No idea. Maybe (Q)UIT?
-Shawn
-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CIT7
38000 Hills Tech Drive
Farmington Hills, MI 48331
(248) 553-1164 (P) (248) 848-2855 (F)
shawn.quillman@xxxxxxxxxxxx
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Tuesday, October 29, 2002 3:25 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server Alerts: SMTP
http://www.ISAserver.org
Unfortunately, I haven't found a reference to those commands yet.
You can make many friends around the world if you succeed...
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/pages/author_index.asp?aut=3
http://isatools.org
Read the help / books / articles!
----- Original Message -----
From: "Alfonso Lopez de Ayala" <alopezdeayala@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, October 29, 2002 11:21 AM
Subject: [isalist] Re: ISA Server Alerts: SMTP
http://www.ISAserver.org
Thank you, Jim! (NOOP command length was only 6. I so would not have
known it can be up to 20, though).
Yes, we are using Exchange. Do I have to add "XEXCH" ("XEXCH50"?) to
the SMTP filter? If so, what should be its maximum length?
ISA Also sends "unknown SMTP command" e-mails for the following 4
commands:
X-LINK2STATE DROP
X-LINK2STATE LAST
X-EXPS GSSAPI
UIT
Is it safe to add them to the SMTP filter in ISA too?
I don't mean to ask so many follow-up questions -- any good reference so
I learn on these "SMTP Filer" issues?
Alfonso
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Tuesday, October 29, 2002 10:41 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server Alerts: SMTP
http://www.ISAserver.org
Change the NOOP command length to 20 (Credit - Tim Mullen)
If you're not using Exchange, then anyone hitting your SMTP server with
XEXCH-based commands is acting inappropriately.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/pages/author_index.asp?aut=3
http://isatools.org
Read the help / books / articles!
----- Original Message -----
From: "Alfonso Lopez de Ayala" <alopezdeayala@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, October 29, 2002 7:30 AM
Subject: [isalist] ISA Server Alerts: SMTP
http://www.ISAserver.org
Hi! ISA e-mails me dozens of alerts every day relating to SMTP. Is that
normal, or should I configure something different?
Alerts I get are of two types:
ISA Server alert: The SMTP command exceeded its allowed length
ISA Server name: ISA-SVR-1
NOOP
or
ISA Server alert: An unknown SMTP command
ISA Server name: ISA-SVR-1
XEXCH50 1840
Thanks so much in advance for any insight into this!
Alfonso
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
alopezdeayala@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
