RE: Message Screener not stopping attachments

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 18 May 2005 10:45:14 -0700

Don't send the zip, I block zips.
Just post it to a website and send me the link.

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, May 18, 2005 10:19
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Message Screener not stopping attachments

http://www.ISAserver.org

Running ISA_Info and will zip and send off list when finished.

John T
eServices For You

> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> Sent: Wednesday, May 18, 2005 8:49 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Message Screener not stopping attachments
> 
> http://www.ISAserver.org
> 
> SPR == good
> Testing - inbound only - no SMTP Filter action our outbound SMTP
> MS Logging - there is none unless the MS takes action.  I know; it's
> bad.
> 
> I know you don't want to send it to the list (too big anyway), but if
> you're willing, I can take a look at the definitions in your SMTP
> filter...
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
> 
> 
> -----Original Message-----
> From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
> Sent: Wednesday, May 18, 2005 00:48
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Message Screener not stopping attachments
> 
> http://www.ISAserver.org
> 
> > Exactly how is the server publishing rule configured?
> 
> Server rule:
> Internal address:             Internal IP of ISA server
> External address:             External IP of ISA server
> Mapped Server Protocol:       SMTP Server
> Applies to:                   Any Request
> 
> > Are you testing inbound or outbound mails?
> 
> Both
> 
> > Look at the IIS/STMPSvc01 etc log.
> 
> It shows the message being received and then relayed to the Exchange
> server.
> Where should I be seeing a logging of the Message Screener checking
the
> message? I see no log for it.
> 
> > Did you check IIS to see if the default mail server was active?
> 
> Yes, it is.
> 
> > You can also use
> http://www.windowsecurity.com/pages/article_p.asp?id=1395
> to help with testing you SMTP service again.
> 
> The SMTP Service on ISA is working as I can see in the log messages
> being
> received from the Internet and sent to Exchange and visa versa.
> 
> FYI, The Message Screener and the IIS SMTP service were configured
after
> ISA
> was installed. Originally, Message Screener was not being used, the
> server
> publishing rule was configured to send the inbound directly to the
> Exchange
> server.
> 
> John T
> eServices For You
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: