GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

RE: Flood of "System Administrator" Undeliverable SPAM, please help

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> RE: Flood of "System Administrator" Undeliverable SPAM, please help Page: <<   < prev  6 7 [8] 9 10   next >   >>
Login
Message << Older Topic   Newer Topic >>
RE: Flood of "System Administrator" Undeliver... - 21.Apr.2008 3:04:31 PM   
JanZoet

 

Posts: 576
Joined: 20.Feb.2008
Status: offline
Hello FresnoDoug,

In the MailEssentials configuration please go to General > Version Information > Properties.
Here you will find your Version and Build number.

If you currently do not have 20080326 installed you can download it via http://kbase.gfi.com/showarticle.asp?id=KBID003323.

Kind regards,

_____________________________

Jan Zoet
Technical Support - GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to FresnoDoug)
Post #: 106
RE: Flood of "System Administrator" Undeliver... - 21.Apr.2008 3:08:17 PM   
amartinez

 

Posts: 7
Joined: 21.Apr.2008
Status: offline
I just patched my ME12, however, please clarify if http://kbase.gfi.com/showarticle.asp?id=KBID003322 the procedure should be removed after the aforementioned patch. (Do I have to remove also blackscatter and blackstatterer from DNS BL?)

Also I have seen valid message in the spam folder since blackscatter(er) is blocking them.

Arturo

(in reply to Nicks)
Post #: 107
RE: Flood of "System Administrator" Undeliver... - 21.Apr.2008 3:27:45 PM   
PaulB

 

Posts: 6
Joined: 27.Mar.2008
Status: offline
I have to update my build before I can install the patch.  Will I lose any of my setting when I remove the old build and install the new one?

(in reply to amartinez)
Post #: 108
RE: Flood of "System Administrator" Undeliver... - 21.Apr.2008 6:25:02 PM   
FresnoDoug

 

Posts: 34
Joined: 28.Nov.2007
Status: offline
Is there a procedure somewhere for installing the 20080326 build?

(in reply to PaulB)
Post #: 109
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 6:17:31 AM   
mtate

 

Posts: 10
Joined: 24.Jul.2007
Status: offline
It's a pretty easy install. Once you've downloaded the setup, simply run the .MSI installer and it will begin the installation. It will ask you to remove the existing installation, but as long as you reinstall to the same directory you won't have any problems.

(in reply to FresnoDoug)
Post #: 110
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 6:36:19 AM   
andih98uk

 

Posts: 16
Joined: 31.Mar.2008
Status: offline
Ok, i've just updated to the latest build and applied the patch. I didn't experience any problems so i'll see how it goes. Well done for releasing a patch so quickly GFI.

(in reply to mtate)
Post #: 111
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 7:47:40 AM   
ChrisTRT

 

Posts: 4
Joined: 22.Apr.2008
Status: offline
I second that - thanks for releasing the patch in good time. As I'm sure we're all aware, software updates MUST be tested before being released (unless we want to go back to the days of old with having 'numerous' issues after an update had been released by a certain large software corporation)?! We are a distributor and have had 'many' customers waiting for this patch (patiently - luckily enough). I have now applied it to several sites, and will wait and see...

(in reply to JanZoet)
Post #: 112
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 8:33:41 AM   
Nicks

 

Posts: 2582
Joined: 17.Mar.2003
Status: offline
Thanks all for your feedback. Although the patch has been successfully tested, and was able to block the majority of the NDR spam emails, we would still like to hear your comments on the efficiency of the patch on your installations.

After installing the patch, there is no need to keep 'ips.backscatterer.org' in your DNS Blacklists, however leaving it there will do no harm. You should however monitor the legitimate emails which may be blocked by ips.backscatterer.org.

Thanks

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to ChrisTRT)
Post #: 113
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 8:47:32 AM   
shield

 

Posts: 22
Joined: 20.Jul.2007
Status: offline
Hi Jan,

Patch release note is speaking about enabling ase_scandsn, but not the other things from http://kbase.gfi.com/showarticle.asp?id=KBID003322  Would it be reasonable to remove "undeliverable" etc from the KeywordChecking and ips.backscatterer.or from DNS Blacklist? Of course, I could try it after some "living with the patch" :)

(in reply to JanZoet)
Post #: 114
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 9:55:52 AM   
sgiusto

 

Posts: 43
Joined: 10.Mar.2006
Status: offline
Patch installed
Removed DNS blacklisting due to too much false positives
Bayesian, URI and keyword are doing a good job!
thank GFI

(in reply to shield)
Post #: 115
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 11:04:07 AM   
Nicks

 

Posts: 2582
Joined: 17.Mar.2003
Status: offline
Hi shield,

The knowledgebase article showed how to use keyword chekcing to block the following keywords:
 
Undeliverable:
Delivery Status Notification (Failure)
Returned mail
Undelivered Mail
failure notice
Mail could not be delivered


This was done to block ALL NDR emails, including legitimate ones.

After installing the patch, this is not required, since the patch targets NDR Spam specifically. Therefore legitimate NDR emails will not be blocked. Because of this, it is recommended to update the keyword checking list and remove the above mentioned keywords from the list.

Please check my previous post regarding 'ips.backscatterer.org'

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to shield)
Post #: 116
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 11:14:28 AM   
shield

 

Posts: 22
Joined: 20.Jul.2007
Status: offline
Thank you, Nicholas. Just needed a confirmation. At the moment, no anomalies observed.

(in reply to Nicks)
Post #: 117
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 12:26:09 PM   
nintenDRU

 

Posts: 12
Joined: 23.Jan.2007
From: Long Beach, CA
Status: offline
I applied the patch yesterday not realizing that I did not have the latest build .  So I just updated to the latest build, do I need to re-apply the patch?

< Message edited by nintenDRU -- 22.Apr.2008 12:53:56 PM >

(in reply to shield)
Post #: 118
RE: Flood of "System Administrator" Undeliver... - 22.Apr.2008 3:43:55 PM   
Nicks

 

Posts: 2582
Joined: 17.Mar.2003
Status: offline
Hi nintenDRU,

Yes, you would need to re-apply the patch after upgrading to the latest build.

Let us know how it goes.

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to nintenDRU)
Post #: 119
RE: Flood of "System Administrator" Undeliver... - 23.Apr.2008 3:57:53 AM   
intraha

 

Posts: 1
Joined: 23.Apr.2008
Status: offline
Hello Nicks,

the Patch is only for english versions (Public Folders new generated in english. I also see it when I open the File "strings.xml")!!!

How can I get the Patch in german language?

(in reply to Nicks)
Post #: 120
Page:   <<   < prev  6 7 [8] 9 10   next >   >>
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> RE: Flood of "System Administrator" Undeliverable SPAM, please help Page: <<   < prev  6 7 [8] 9 10   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software