Mailsecurity Attachment Checking Exeption List (Full Version)

All Forums >> [Content Security] >> GFI MailSecurity for Exchange/SMTP



Message


wanhermann -> Mailsecurity Attachment Checking Exeption List (19.Jun.2008 3:31:58 AM)

Hi all,

i create an attachment checking rule to block all files greater than the following size: 10000kb
the rule works fine, all mails with attachments greater than 10000kb are moved to the quarantine.

now i need some exeptions, and there is the problem,
the exeption list doesn't work

i insert a user, in the list i see the the user and his mailaddress,
but all mails (greater than...) are blocked

anyone use the same setting and it works?

br
Hermann




John Letourneau -> RE: Mailsecurity Attachment Checking Exeption List (24.Jun.2008 11:48:22 AM)

Hermann,

What build of GFI MailSecurity 10 are you currently running?




wanhermann -> RE: Mailsecurity Attachment Checking Exeption List (24.Jun.2008 4:41:47 PM)

Hi John

the newst (20080404) ...
i know i have to update befor gfi gives me support [:@]

br




mss -> RE: Mailsecurity Attachment Checking Exeption List (25.Jun.2008 3:09:17 AM)

Hi,

Keep in mind that if there is at least one recipient or sender in such mails whose email address belongs to the Local Domains but not in the exception list the rule will still be applied. Is that the case in your situation ?

Regards,

Max Sushchenko
GFI Software Ltd - www.gfi.com




wanhermann -> RE: Mailsecurity Attachment Checking Exeption List (2.Jul.2008 6:54:42 AM)

dear Max,

sorry i cann't follow your discription.
I want to block (quarantine) all emails (incoming & outgoing) larger than 10MB.
Only less special mailadresses should be able to mail without the max Mailsize.

br
Hermann




John Letourneau -> RE: Mailsecurity Attachment Checking Exeption List (15.Jul.2008 10:34:06 AM)

wanhermann,

To do this please do the following:

1.  Open GFI MailSecurity
2.  Go to "Attachment Filtering"
3.  Create a new rule
4.  Enable the "Block all files greater than the following size in Kb:"
5.  Enter your desired size
6.  Go to "Users/Folders"
7.  Select the radio button "All Except This List" and enter the users you do not want the size limit to apply to
8.  Apply the rule

Please note that if user1 is on the exclusion list and a message is sent to user1 and user2 the attachment will be blocked for both users as user2 was not an excluded user.




wanhermann -> RE: Mailsecurity Attachment Checking Exeption List (16.Jul.2008 4:00:59 AM)

Dear John,

thx for the info, did you realy try this settings ever?
Because it is the same in the gfi documentation and it is wrong,
or better there is one important missing line!

You have to switch in the attachemnt blocking section from:
- block all -> to block this list,
because if you don't change, ALL Mails with attachment will be blocked,
without any dependency of the size of the attachment!! [:'(]

be sure, after 6 weeks & 50 mails & hours on the gfi support phone,
i know to configure the attachment blocking rule...

is there no one on this planet who use the gfi & its feature?

maybe i have to change the product...
because the product doesn't work
and the support,... 6 weeks & no useful response [:@][:@][:@]




wanhermann -> RE: Mailsecurity Attachment Checking Exeption List (16.Jul.2008 4:30:10 AM)

Hi,
no we have only 1 receipient
br




John Letourneau -> RE: Mailsecurity Attachment Checking Exeption List (16.Jul.2008 12:32:41 PM)

wanhermann,

1.  Open GFI MailSecurity
2.  Go to "Attachment Filtering"
3.  Edit your attachment rule
4.  Uncheck "Block all files greater than the following size in Kb:"
5.  Click Apply
6.  Under "Attachment blocking" check the radio button for "Block this list"
7.  Click Apply
8.  Check "Block all files greater than the following size in Kb:"
9.  Click Apply

After performing these steps please test the software.  This should allow your attachment rules to work the way you want them.




wanhermann -> RE: Mailsecurity Attachment Checking Exeption List (17.Jul.2008 3:07:20 AM)

Dear John,
we test this setting yesterday, and if it is a mail from outlook it works
also if we insert an exeption (AD User) works fine.
The problem is, we have an user in the exeption list
and a program which uses the emailaddress from the user to send emails,
in this case the exeption from the rule doesn't work.
Have you any idea why "User A" with the mailaddress user.a@domain.net works,
but if an application send an email with the sender address user.a@domain.net the mail will be blocked (the exeption from the rule doesn't work fine...). ??
br




mss -> RE: Mailsecurity Attachment Checking Exeption List (17.Jul.2008 11:12:51 AM)

Hi,

Does this application sends an email from user.a@domain.net to, say, user.b@domain.net, i.e. in the same domain ( or any other local domain ) ? In that case if user.b is not in the exception list, the email is going to be blocked. GFI MailSecurity applies "strictest" principle when determining if a rule should be applied or not which essentially can be represented as follows:

If a sender or at least one recipient has an email address belonging to the list of local domains and does not appear in the exception list, the rules should be applied.

Regards,
Max Sushchenko
GFI Software Ltd - www.gfi.com




wanhermann -> RE: Mailsecurity Attachment Checking Exeption List (17.Jul.2008 11:31:42 AM)

Dear Max,
first good idea on my question!
In detail, maybe your discription is the problem [8|]

We have some internal maildomains: @mm-karton.com & @mm-packaging.com a.m.
We have an AD User 3C Reports with the primary mailadress excel@mm-karton.com
On an exchange frontend in the GFI Mailsecurity we have a rule to block all mails lager than 10000kb
the rule works, also the exeption list, if i insert any AD User.
In the exeption list the User "3C Reports" with the mailaddress excel@mm-karton.com is member.
A perl program try's to send an email with an attachment (15MB) over frontend, as "from:" we use excel@mm-karton.com, as receipient we have some different internal mailaddresses...
Why the mail will be blocked? [:@]
Is the problem because the internal receipient isn't on the rule exeption list?
Is it because gfi is unable to receive the AD User?

Because if we write in outlook with the 3C Reports User an email, the delivery with the rule exeption list works fine... [&:]

Strange.-....




mss -> RE: Mailsecurity Attachment Checking Exeption List (18.Jul.2008 3:14:47 AM)

Hi,

If the "different internal mailaddress" you mentioned is not in the exception list AND its domain part belongs to one of the local domains configurable in GFI MailSecurity Configuration->Settings->Local Domains, the email is going to be blocked.

Regards,
Max Sushchenko
GFI Software Ltd - www.gfi.com




Page: [1]