GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Must use proxy with basic authentication for update SpamRazer

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Must use proxy with basic authentication for update SpamRazer Page: [1]
Login
Message << Older Topic   Newer Topic >>
Must use proxy with basic authentication for update Spa... - 29.Sep.2008 8:36:40 AM   
t.janssen

 

Posts: 23
Joined: 29.Nov.2004
From: Wijchen, The Netherlands
Status: offline
I can only update the SpamRazer bij allowing basic authentication through a proxy server.
Is this a bug? All other GFI updates are allowed by using one firewall rule.
(I use ISA 2006 as a firewall/proxy).
Post #: 1
RE: Must use proxy with basic authentication for update... - 29.Sep.2008 8:43:07 AM   
justme

 

Posts: 58
Joined: 23.Aug.2004
From: Raamsdonksveer, The Netherlands
Status: online
Check this thread: http://forums.gfi.com/Question_about_SpamRazer_updates/m_900768632/tm.htm.

It is about the same problem.

_____________________________

Another day, another challenge
Paul Storm van Leeuwen
Systems Manager Holmatro
http://www.holmatro.com/

(in reply to t.janssen)
Post #: 2
RE: Must use proxy with basic authentication for update... - 29.Sep.2008 8:46:30 AM   
t.janssen

 

Posts: 23
Joined: 29.Nov.2004
From: Wijchen, The Netherlands
Status: offline
Indeed, but there seems to be no solution for this.
Is someone from GFI notified for this problem? Because I don't want my firewall to accept basic authentications for long.

(in reply to justme)
Post #: 3
RE: Must use proxy with basic authentication for update... - 29.Sep.2008 8:52:44 AM   
justme

 

Posts: 58
Joined: 23.Aug.2004
From: Raamsdonksveer, The Netherlands
Status: online
There is a reply from GFI somewhere in there (I believe from Nicks). They should be aware of the problem.
I can understand you don't want to keep your firewall set to basic to long. We used another solution for the problem, but maybe that is not something you can/want to do.

_____________________________

Another day, another challenge
Paul Storm van Leeuwen
Systems Manager Holmatro
http://www.holmatro.com/

(in reply to t.janssen)
Post #: 4
RE: Must use proxy with basic authentication for update... - 29.Sep.2008 8:54:46 AM   
t.janssen

 

Posts: 23
Joined: 29.Nov.2004
From: Wijchen, The Netherlands
Status: offline
What solution did you use?

(in reply to justme)
Post #: 5
RE: Must use proxy with basic authentication for update... - 29.Sep.2008 9:39:46 AM   
justme

 

Posts: 58
Joined: 23.Aug.2004
From: Raamsdonksveer, The Netherlands
Status: online
I used the following solution:

I made a adjusment to our firewall. The server is now allowed to go onto the web directly. We have a rule in our first firewall which allows certain ip-adresses direct webacces. This rule does not require any authentication at all. Because there is no authentication requirement, the spamrazer updates are downloaded. Keep in mind that this is a ISA2006 that runs as a reverse proxy and router in our network. We have a second (Cisco) firewall running on our internet connection.

_____________________________

Another day, another challenge
Paul Storm van Leeuwen
Systems Manager Holmatro
http://www.holmatro.com/

(in reply to t.janssen)
Post #: 6
RE: Must use proxy with basic authentication for update... - 29.Sep.2008 10:19:51 AM   
t.janssen

 

Posts: 23
Joined: 29.Nov.2004
From: Wijchen, The Netherlands
Status: offline
Ok.
Unfortunately our ISA-2006 is an edge firewall, so I won't try this way.
Bytheway, your Cisco seems to let through the unauthenticated HTTP traffic? So what's the difference with ISA on the edge?

(in reply to justme)
Post #: 7
RE: Must use proxy with basic authentication for update... - 29.Sep.2008 1:06:54 PM   
joep

 

Posts: 21
Joined: 14.Dec.2007
Status: offline
I have e-mailed them on this issue. Waiting for fix.

_____________________________

Joseph Pflum
Kenton County Network Admin
303 Court Street
Covington, Ky 41011

(in reply to t.janssen)
Post #: 8
RE: Must use proxy with basic authentication for update... - 30.Sep.2008 2:24:30 AM   
justme

 

Posts: 58
Joined: 23.Aug.2004
From: Raamsdonksveer, The Netherlands
Status: online
I made a slight mistake in explaining the setup we use . Let me try again. We are using the following route for a "normal" user: Browser/PC --> Proxyserver (ISA2004 and WebMonitor 4) --> ISA2006 as a router and reverse proxy (ISA2006 is setup like this due to the fact that we also do some web publishing) --> Cisco firewall (only accepts traffic from the ISA2006).

The mailserver is using the following route: ISA2006 as a router (we use multiple IP-ranges internally) and reverse proxy ( ISA2006 and setup like this due to the fact that we also do some web publishing) --> Cisco firewall (only accepts traffic from the ISA2006).

What I am doing with the mailserver is this. I just bypass the proxyserver and go directly to the ISA2006 for port 80. It was already doing this for port 25.

We use a proxyserver only for access control to the web. Not everyone is allowed to go onto the web.

Did some more checking. The ISA2006 is set as a Edge firewall. I didn't mention this earlier, because we didn't setup the system ourselves. It was done by external consultants.

< Message edited by justme -- 30.Sep.2008 2:36:18 AM >


_____________________________

Another day, another challenge
Paul Storm van Leeuwen
Systems Manager Holmatro
http://www.holmatro.com/

(in reply to joep)
Post #: 9
RE: Must use proxy with basic authentication for update... - 30.Sep.2008 3:01:11 AM   
t.janssen

 

Posts: 23
Joined: 29.Nov.2004
From: Wijchen, The Netherlands
Status: offline
Dank je voor de uitleg Paul. (Thanks for your explanation Paul).

(in reply to justme)
Post #: 10
RE: Must use proxy with basic authentication for update... - 30.Sep.2008 3:03:50 AM   
justme

 

Posts: 58
Joined: 23.Aug.2004
From: Raamsdonksveer, The Netherlands
Status: online
Graag gedaan (Your welcome)

_____________________________

Another day, another challenge
Paul Storm van Leeuwen
Systems Manager Holmatro
http://www.holmatro.com/

(in reply to t.janssen)
Post #: 11
RE: Must use proxy with basic authentication for update... - 30.Sep.2008 12:05:10 PM   
Nicks

 

Posts: 2600
Joined: 17.Mar.2003
Status: offline
Hi all,

Do you update the Bayesian database and the Anti-Phishing database. MailEssentials currently does not support proxy settings for these 2 Anti-Spam engines. Have you configured your firewalls to allow the HTTP connection to our update servers?

Thank you

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to justme)
Post #: 12
RE: Must use proxy with basic authentication for update... - 30.Sep.2008 12:20:32 PM   
t.janssen

 

Posts: 23
Joined: 29.Nov.2004
From: Wijchen, The Netherlands
Status: offline
Yes I update Bayesian and Anti-Phishing database.
And yes, I allow HTTP to your update servers (including the new *.mailshell.com and *.mailshell.net)

(in reply to Nicks)
Post #: 13
RE: Must use proxy with basic authentication for update... - 1.Oct.2008 3:31:00 AM   
Annancy

 

Posts: 16
Joined: 10.May2004
Status: offline
I'm experiencing the same problem on our side. Update of Bayesian and Anti-Phishing (as well as Pattern-Files on MSEC) are doing well.
The server is allowed to connect to internet by http/https and I can also connect from the server (using a webbrowser) to mailshell.com as well as to the ip where the SpamRazer engine obviously trys to update (209.157.66.250).

(in reply to t.janssen)
Post #: 14
Page:   [1]
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> Must use proxy with basic authentication for update SpamRazer Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software