local addresses added to autowhitelist
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
local addresses added to autowhitelist - 9.Jul.2008 11:31:11 PM
|
|
|
remushociota
Posts: 79
Joined: 14.Mar.2007
Status: offline
|
Hi everyone
Let me first tell you that I already have a ticket opened with GFI tech support but it's taking so long to solve anything... I go back and forth for 5 days now. Although I understand this kind of things having a tech rep answer your email once a day is absurd... I send info wait for 1 more day, and so on.
Anyway let me address this on the forums as well maybe some other people are having this problem too.
Normally when an authenticated user is sending emails to your internal domain via a SMTP connection (so not the outlook via exchange setup) the people in TO and CC should not be added against the MIME FROM in the auto-whitelist. Only outside addresses get added. All is good in theory however in my case whenever we receive some local emails sent by local users and destined to local recipients and we do a REPLY ALL some local users get added to auto-whitelist thus poluting it with local MIME from. Of course one does not want that and only wants his local users added for SMTP FROM so you can avoid spoofed emails from your own domain (this has been covered in other posts).
So question is: are other people that use SMTP connections to send emails with their server finding local users in their auto-whitelist?
thanks
P.S. I use latest version of ME with exchange 2003 SP2 on windows server 2003 r2 sp2 with all the updates bla bla.
< Message edited by remushociota -- 9.Jul.2008 11:46:17 PM >
|
|
|
|
|
RE: local addresses added to autowhitelist - 10.Jul.2008 9:04:01 AM
|
|
|
bsimpsonky
Posts: 9
Joined: 31.Mar.2008
Status: offline
|
If you have smartphone/pda users that use Exchange Activesync and email has been sent from their phones and replied to from any of your Exchange email accounts, those email addresses will get added to the whitelist.
|
|
|
|
|
RE: local addresses added to autowhitelist - 10.Jul.2008 9:41:17 AM
|
|
|
remushociota
Posts: 79
Joined: 14.Mar.2007
Status: offline
|
The emails originate from local users who use Outlook Express to send the mail via SMTP (and their account is authenticated of course as I am not an open relay). They send to local users.
I as a local user who is also using OE, receive these emails and when I do a reply all some of them get added to autowhitelist, but interesting enough just the ones added to our first domain, meaning when we first installed GFI the first domain we added there was let's say domain1.com. Then as time passed by we also added domain2.com and domain3 and 4
These emails belong on the same exchange server who is handeling emails for several domains.
The emails that are sent are from users @domain.com and @domain2.com. However only the users belonging to domain1.com (who was the very first domain added) get added to auto whitelist.
bsimsonky: what you said is not my case but is that ok? I mean should GFI really add those to auto whitelist?... I thought that all authenticated accounts (via smtp) are exempt from scanning no? Or at least they should be in my opinion...
|
|
|
|
|
RE: local addresses added to autowhitelist - 10.Jul.2008 9:50:12 AM
|
|
|
John Letourneau
Posts: 1124
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
remushociota,
If you send a message from one of the Outlook Express users to another internal recipient do you see the message show up in the GFI Monitor?
_____________________________
Regards,
John Letourneau - Senior Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: local addresses added to autowhitelist - 10.Jul.2008 9:59:56 AM
|
|
|
remushociota
Posts: 79
Joined: 14.Mar.2007
Status: offline
|
Yes John they show up in monitor.
|
|
|
|
|
RE: local addresses added to autowhitelist - 10.Jul.2008 1:12:15 PM
|
|
|
Eddie.Hirko
Posts: 22
Joined: 29.Apr.2008
Status: offline
|
remushociota,
Whichever e-mail domains are are listed under "Inbound Email Domain" (under the Properties of General) *should* be ignored by the Autowhitelist. This does not appear to be happening in your installation. I have instructed the technical support representative who is managing your case to send you instructions for getting the data we need to determine why it is not working correctly on your domain. You should receive this e-mail shortly. Thank you!
_____________________________
Eddie Hirko
GFI Software
|
|
|
|
|
RE: local addresses added to autowhitelist - 23.Jul.2008 11:11:35 AM
|
|
|
remushociota
Posts: 79
Joined: 14.Mar.2007
Status: offline
|
For everyone in my situation, after a long battle we found the problem.
I guess it will be fixed in a future release but for now this is a workaround:
In general -> properties -> inbound domains the GFI setup finds your local domain and enters it (or at least this is what it did in my case) like this MYDOMAIN.COM so uppercases.
However all my emails from user@mydomain.com were added to whitelist against MIME FROM which is wrong and causes problems with the anti spoofed emails from your domain to your domain. The problem is that it is case sensitive and I had to change in there to lower case meaning mydomain.com and this fixed the problem.
hth
|
|
|
|
|
RE: local addresses added to autowhitelist - 23.Jul.2008 11:23:34 AM
|
|
|
John Letourneau
Posts: 1124
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
remushociota,
Thanks for letting us know what resolved this issue for you.
_____________________________
Regards,
John Letourneau - Senior Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: local addresses added to autowhitelist - 29.Jul.2008 11:24:55 AM
|
|
|
brandonassoc
Posts: 46
Joined: 4.Jan.2005
Status: offline
|
I just had this same problem. This appears to be a bug - as you cannot enter both the upper and lower case versions to the inbound domains.
Now to figure out why I am still gett obvious spam emails getting through.
quote:
ORIGINAL: remushociota
For everyone in my situation, after a long battle we found the problem.
I guess it will be fixed in a future release but for now this is a workaround:
In general -> properties -> inbound domains the GFI setup finds your local domain and enters it (or at least this is what it did in my case) like this MYDOMAIN.COM so uppercases.
However all my emails from user@mydomain.com were added to whitelist against MIME FROM which is wrong and causes problems with the anti spoofed emails from your domain to your domain. The problem is that it is case sensitive and I had to change in there to lower case meaning mydomain.com and this fixed the problem.
hth
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
