GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

SPF: Add subnets as IP exceptions / or "Global exceptions"

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> SPF: Add subnets as IP exceptions / or "Global exceptions" Page: [1]
Login
Message << Older Topic   Newer Topic >>
SPF: Add subnets as IP exceptions / or "Global exc... - 16.Oct.2006 7:43:09 AM   
Mats Bjur

 

Posts: 109
Joined: 9.Sep.2004
From: Gothenburg, Sweden
Status: offline
Hi

Having set SPF to medium, I've run into some administrative problems.

Namely, all internal mails from Printers & other hardware, SharePoint servers, and internal web servers getting classified as SPF fail/spam.

In order to aviod this, I'd like to be able specify parts of my internal subnets as IP exceptions. Entering IP-address after IP-address to accomplish and maintain this just isn't doable.

Can you please fix so that subnets could be specified? Ie, 192.16.8.0.1/48

In fact, this would be useful in all modules, just not SPF.


An alternative would be a new "Global Exceptions" list, where you could specify domains, subnets or wildcard e-mail adresses that would bypass all modules.

< Message edited by Mats Bjur -- 16.Oct.2006 7:49:30 AM >
Post #: 1
RE: SPF: Add subnets as IP exceptions / or "Global... - 17.Oct.2006 3:28:12 AM   
Mats Bjur

 

Posts: 109
Joined: 9.Sep.2004
From: Gothenburg, Sweden
Status: offline
hmm.. it also seems that the SPF IP exceptions isn't working. I've added a quiet large list of servers (about 75 IP's) as exceptions, but mails from these IP-excpetion servers (not in the DNS SPF-record) is still getting SPF softfail.

(in reply to Mats Bjur)
Post #: 2
RE: SPF: Add subnets as IP exceptions / or "Global... - 17.Oct.2006 8:13:59 AM   
Mark Busuttil

 

Posts: 4833
Joined: 16.Oct.2005
Status: offline
I have added your requests to the feature request list.

However, please note that currently there is the IP whitelist which can be found in the Whitelist Anti Spam Module.

(Depending on Module Priority) MailEssentials will not filter out any emails coming from this IP address.

Have you tried restarting the GFI MailEssentials attendant, to ensure that the changes have taken effect?

Thank You!

_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to Mats Bjur)
Post #: 3
RE: SPF: Add subnets as IP exceptions / or "Global... - 19.Oct.2006 5:10:58 AM   
Mats Bjur

 

Posts: 109
Joined: 9.Sep.2004
From: Gothenburg, Sweden
Status: offline
I changed the SPF-record instead, so that it now is:
quote:

v=spf1 ptr:mycompany.se -all

This doesn't seem to have had any effect though, since mails from other internal systems still gets classified as "SPF SoftFail".

Does changes require service restarts? Why is there no notification about this when I do the changes? Or even better, why doesn't GFI restart the service itself if this is necessary?

(in reply to Mark Busuttil)
Post #: 4
RE: SPF: Add subnets as IP exceptions / or "Global... - 19.Oct.2006 8:19:24 AM   
Patrizia

 

Posts: 8474
Joined: 18.Aug.2003
From: Malta
Status: offline
Mats Bjur,

We would need to check further why mails coming from excepted IP's are still being blocked. Can you please send an e-mail with troubleshooter files to forums@gfi.com?

Note that by default, internal mails should not pass through the IIS SMTP server and would therefore not be scanned by GFI MailEssentials. Can you explain your setup further?

_____________________________

Patrizia Caruana
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to Mats Bjur)
Post #: 5
RE: SPF: Add subnets as IP exceptions / or "Global... - 19.Nov.2006 1:32:44 PM   
Mats Bjur

 

Posts: 109
Joined: 9.Sep.2004
From: Gothenburg, Sweden
Status: offline
Hi Patrizia, as explained, I cannot provide troubleshooter files as there's no way of specifying where the files should be stored. Storing them on the installed drive isn't doable as it will fill the drive in no time....

(in reply to Patrizia)
Post #: 6
Page:   [1]
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> SPF: Add subnets as IP exceptions / or "Global exceptions" Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software