Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

RE: Blacklist email address notification?

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> RE: Blacklist email address notification? Page: <<   < prev  1 [2]
Login
Message << Older Topic   Newer Topic >>
RE: Blacklist email address notification? - 21.May2009 8:45:49 AM   
Ytsejamer1

 

Posts: 136
Joined: 7.Mar.2006
Status: offline
Well, I've tried restarting the system, but read receipts are still coming through.  I can't quite figure out why installing another sink event would have broken it.

(in reply to RSP)
Post #: 16
RE: Blacklist email address notification? - 21.May2009 8:50:51 AM   
RSP

 

Posts: 1447
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: offline
Could it be something to do with the priority, and it's not actually getting run because an earlier one is returning a value of 1 which we've determined to mean "stop running sinks"?

Did I read correctly that you re-registered this sink? If so, you can change its priority with a /setprop argument, or just tack a priority on to the end of the /add command and re-register.

Has the script been changed since it was first installed? I'm not sure if a "copy" of the script is registered somewhere else and used as the live version, so if you change the disk version, it doesn't make a difference.

(in reply to Ytsejamer1)
Post #: 17
RE: Blacklist email address notification? - 21.May2009 10:02:07 AM   
Ytsejamer1

 

Posts: 136
Joined: 7.Mar.2006
Status: offline
yep...I uninstalled the remove read receipt script a similar way that the uninstall occurs for the blacklist one we're trying to get going.  I checked what sinks were installed by going "cscript smtpreg.vbs /enum |more".  The result was what I posted above in regards to the read receipt script.  The script location, content, etc has not changed at all.  I reinstalled the same exact way as I did the first time.  But it doesn't seem to be working.  There's nothing else running with a "1" which would bypass it. 

Unfortunately I don't know what the priority was when I first had it installed and working...  Below is every sink and their current priority.

              --------
             | Source |
              --------
              Name: smtpsvc 1
                ID: {1B3C0666-E470-11D0-AA67-80C04FA345F6}
                       ---------
                      | Binding |
                       ---------
                                  Event: SMTP StoreDriver
                                     ID: {609B7E3A-C918-11D1-AA5E-00C04FA35B82}
                                   Name: Exchange Ntfs Store Driver
                              SinkClass: Exchange.NtfsDrv
                                Enabled: True
                       SourceProperties: {
                                          priority = 28000
                                         }
                       ---------
                      | Binding |
                       ---------
                                  Event: SMTP Protocol OnInboundCommand
                                     ID: {546F8040-96A3-4B78-8B7A-3F8442D7BFDE}
                                   Name: smtpinboundrcpt
                              SinkClass: smtpinsink.InSink
                                Enabled: True
                       SourceProperties: {
                                          Rule = rcpt
                                          Priority = 10
                                         }
                       SinkProperties    {
                                          VirtualServerInstance = 1
                                         }
                       ---------
                      | Binding |
                       ---------
                                  Event: SMTP Protocol OnInboundCommand
                                     ID: {A39272BE-078A-4C71-9571-0BEE1D5472CF}
                                   Name: smtpinboundbdat
                              SinkClass: smtpinsink.InSink
                                Enabled: True
                       SourceProperties: {
                                          Rule = bdat
                                          Priority = 10
                                         }
                       SinkProperties    {
                                          VirtualServerInstance = 1
                                         }
                       ---------
                      | Binding |
                       ---------
                                  Event: SMTP Protocol OnInboundCommand
                                     ID: {C386B193-C087-4B4C-AD75-B3F4FFEF734E}
                                   Name: smtpinbounddata
                              SinkClass: smtpinsink.InSink
                                Enabled: True
                       SourceProperties: {
                                          Rule = data
                                          Priority = 10
                                         }
                       SinkProperties    {
                                          VirtualServerInstance = 1
                                         }
                       ---------
                      | Binding |
                       ---------
                                  Event: SMTP Protocol OnMessageStart
                                     ID: {83D5BC59-B6C8-4B77-88B0-B7CA8F3BA1AC}
                                   Name: outboundsink
                              SinkClass: Outboundsink.Sink
                                Enabled: True
                       SourceProperties: {
                                          Rule = MAIL FROM=*
                                          Priority = 20
                                         }
                       SinkProperties    {
                                          VirtualServerInstance = 1
                                         }
                       ---------
                      | Binding |
                       ---------
                                  Event: SMTP Transport OnSubmission
                                     ID: {0E308FA2-C1E1-42FB-A0C5-1B8E08A7ACCB}
                                   Name: ReadReceiptSink
                              SinkClass: CDO.SS_SMTPOnArrivalSink
                                Enabled: True
                       SourceProperties: {
                                          Rule = rcpt to=*@newdomain.com
;rcpt to=*@olddomain.com
                                          Priority = 24575
                                         }
                       SinkProperties    {
                                          ScriptName = C:\RemoveReadReqSink\rea
dreceiptrequestremoval.vbs
                                         }

Here are the commands I ran:
cscript smtpreg.vbs /add 1 onarrival ReadReceiptSink CDO.SS_SMTPOnArrivalSink "rcpt to=*@newdomain.com;rcpt to=*olddomain.com"

and

cscript smtpreg.vbs /setprop 1 onarrival ReadReceiptSink Sink ScriptName "C:\RemoveReadReqSink\readreceiptrequestremoval.vbs"

I believe it automatically set the priority.  I wonder what number I should throw in there with the setprop to reregister it.

(in reply to RSP)
Post #: 18
RE: Blacklist email address notification? - 21.May2009 10:09:33 AM   
RSP

 

Posts: 1447
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: offline
Lower numbers seem to be higher priority.

Can you try separating out the 'rcpt to' into two sinks named differently to see if the rule is now broken (due to ms update) coompared to when it first went in?

Can you post the script itself?

(in reply to Ytsejamer1)
Post #: 19
RE: Blacklist email address notification? - 21.May2009 10:39:07 AM   
Ytsejamer1

 

Posts: 136
Joined: 7.Mar.2006
Status: offline
how do you post the script in its own subwindow on the forum?  I was trying to figure that out so you'd be able to copy it.  Lower number would be higher priority.  That's pretty much on par with everything.  I was thinking about some update breaking something...wouldn't surprise me.

I will email it to you via in zip file.

(in reply to RSP)
Post #: 20
RE: Blacklist email address notification? - 21.May2009 10:42:04 AM   
RSP

 

Posts: 1447
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: offline
Ok. I put scripts within a CODE within a QUOTE.

(in reply to Ytsejamer1)
Post #: 21
RE: Blacklist email address notification? - 21.May2009 10:59:58 AM   
Ytsejamer1

 

Posts: 136
Joined: 7.Mar.2006
Status: offline
no dice on the single rcpt to= domain

quote:

<SCRIPT language="VBScript">

' THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
' EITHER EXPRESSED OR IMPLIED,  INCLUDING BUT NOT LIMITED TO THE IMPLIED
' WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE.
' 
' This code is free for both personal and commercial use,
' but you are expressly forbidden from selling.
'
' **************************************************************************
' FILE NAME:
'   readreceiptrequestremoval.vbs
' 
' DESCRIPTION: 
'   This script is a CDOSYS OnArrival Transport Event Sink, which can
'   remove the read receipt request from the mails submitted to the
'   script.
' 
' COPYRIGHT:
'   Copyright (c) Vamsoft Ltd. 2002, Peter Karsai (peter.karsai@vamsoft.com).
'   All rights reserved.
' 
' NOTES:
'   The original version of this source code and the article that
'   includes this source code can be found at:
'
'     [link=http://www.vamsoft.com]http://www.vamsoft.com[/link]
'
' **************************************************************************

 Const cdoRunNextSink = 0

 Sub ISMTPOnArrival_OnArrival(ByVal Msg, EventStatus)
  ' remove read receipt fields
  Set Flds = Msg.Fields
  With Flds
    .Delete("urn:schemas:mailheader:Disposition-Notification-To")
    .Delete("urn:schemas:mailheader:Read-Receipt-To")
    ' update the mail header
    .Update
  End With

  ' save changes to the mail
  Msg.Datasource.Save

  ' continue with the next event sink
  EventStatus = cdoRunNextSink
 End Sub

</SCRIPT>


You know what...i think I remember after the read receipt removal sink was put in, changing GFI to filter at the SMTP data level for the directory harvesting.  I wonder if that maybe changed something in regards to when this occurs and when the removal sink occurs.

< Message edited by Ytsejamer1 -- 21.May2009 11:07:34 AM >

(in reply to Ytsejamer1)
Post #: 22
Page:   <<   < prev  1 [2]
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> RE: Blacklist email address notification? Page: <<   < prev  1 [2]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts