Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

HELP! SoBig.F Emails are driving us NUTS!

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailSecurity >> HELP! SoBig.F Emails are driving us NUTS! Page: [1]
Login
Message << Older Topic   Newer Topic >>
HELP! SoBig.F Emails are driving us NU... - 4.Sep.2003 2:19:00 PM   
seg

 

Posts: 7
Joined: 1.Sep.2003
Status: offline
I places this question before, but have yet to receive a satisfactory response from GFI...

We have an issue in that we need to DISABLE the quarantine notifications produced by MS for SoBig.F viruse email . The option to notify the user is turned OFF, yet they still get the email with the mailsecurity.txt attachment.

The problem is that about half (50) of our users are getting one of these emails every 10 seconds or so!

It's proving VERY frustrating!So the question is, how do we stop these? I have even configured filtering of specific email addresses on Exchange 2000 under ESM / Global Settings / Message Delivery / Properties, but it appears that MS/ME get to the email first...

Is there another way to completely disable ALL notifications?
Post #: 1
RE: HELP! SoBig.F Emails are driving u... - 4.Sep.2003 9:20:00 PM   
mahnjame

 

Posts: 1
Joined: 4.Sep.2003
Status: offline
I too have had strange issues with MailSecurity after the last update/build. Although I changed several options they never "stuck". MailSecurity would always change them back to the original setting. I finally ended up UNINSTALLING MailSecurity and REINSTALLING it to get it to work properly. It did not solve all my problems because I needed to repeat the reinstallation today but in the end it released its stubborn grip on marking everything as an Email Exploit.

(in reply to seg)
Post #: 2
RE: HELP! SoBig.F Emails are driving u... - 5.Sep.2003 10:37:00 AM   
ctsmiths

 

Posts: 43
Joined: 2.Jun.2003
Status: offline
Which build are you refering to ?

(in reply to seg)
Post #: 3
RE: HELP! SoBig.F Emails are driving u... - 5.Sep.2003 10:56:00 AM   
seg

 

Posts: 7
Joined: 1.Sep.2003
Status: offline
We have v7.2, build 20021115

I will try upgrading to latest version tonight...

(in reply to seg)
Post #: 4
RE: HELP! SoBig.F Emails are driving u... - 8.Sep.2003 1:53:00 PM   
securityinfo

 

Posts: 13
Joined: 8.May2002
From: Okc, OK USA
Status: offline
This may be related, and may help...

I installed MailSecurity first, followed by MailEssentials (which may explain my succes with this). I configured MailSecurity to examine inbound mail subject lines for all of the possible examples that Sobig.f presents("your details", etc.,) and then gave it the action to delete all mails meeting the condition (while logging to a text file). I have a very large log file now, and I don't have to deal with quaratines etc. I suppose I could miss a real mail that had the same subject line as Sobig.f, but it seems worth the tradeoff.

/john

(in reply to seg)
Post #: 5
RE: HELP! SoBig.F Emails are driving u... - 8.Sep.2003 11:55:00 PM   
nathapol

 

Posts: 1
Joined: 8.Sep.2003
Status: offline
Hi Solomon,

What kind of GFI MS. installation? In the past I've got same problem which you face now. So I got some idea from internet about SMTP gateway solution which will be integrated by GFI MS. This one quite good solution.

The Installation has been shown in GFI MS's documentation. but if you need more info. please let me know.

(in reply to seg)
Post #: 6
Page:   [1]
All Forums >> [Web & Mail Security] >> GFI MailSecurity >> HELP! SoBig.F Emails are driving us NUTS! Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts