Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Whitelisted - Still getting trapped

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> Whitelisted - Still getting trapped Page: [1]
Login
Message << Older Topic   Newer Topic >>
Whitelisted - Still getting trapped - 11.Sep.2009 11:38:35 AM   
AFlowers

 

Posts: 165
Joined: 12.Feb.2007
Status: offline
I have whitelisted an address, both with mime check and smtp check.  Whitelist is on top.  It is still getting trapped with the "Email has different SMTP TO: and MIME TO: fields in the email addresses" reason in the subject line.  Any ideas?

Thanks in advance!
Post #: 1
RE: Whitelisted - Still getting trapped - 11.Sep.2009 11:46:17 AM   
RSP

 

Posts: 1441
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: online
This?

_____________________________

Disclaimer: I don't work for GFI, I just use their products.

(in reply to AFlowers)
Post #: 2
RE: Whitelisted - Still getting trapped - 11.Sep.2009 12:41:57 PM   
AFlowers

 

Posts: 165
Joined: 12.Feb.2007
Status: offline
Hi RSP.  I'm still on 14.  Is there anything in 14 that would cause this?

(in reply to RSP)
Post #: 3
RE: Whitelisted - Still getting trapped - 11.Sep.2009 1:06:32 PM   
RSP

 

Posts: 1441
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: online
I did have some trouble a while back where some addresses weren't getting put on the whitelist quickly enough but never found out the cause. I presume you've tried iisreset?

It's possible that autowhitelist.mdb is corrupt - can you repair it with Outlook? - anything in your debuglogs to suggest what the problem is? Also check the config.mdb's antispam2_whitelist table for a corrupt entry - suspect anything with spurious characters.

_____________________________

Disclaimer: I don't work for GFI, I just use their products.

(in reply to AFlowers)
Post #: 4
RE: Whitelisted - Still getting trapped - 23.Sep.2009 2:45:55 AM   
AndrewZT

 

Posts: 103
Joined: 28.Jul.2004
Status: offline
Hi all,

There is a patch you can install to resolve this issue:
http://ftp.gfisoftware.com/patches/me14/20090826/ME141_PATCH_20090917_01.zip

This patch should be applied to installations of the following
builds of GFI MailEssentials 14.1 and above:

-> 20090826

Issues fixed:

1. This patch fixes an issue whereby the Whitelist entries are ignored and
antispam filtering is still performed.

2. The MailEssentials Scan Engine crashes whilst processing the Whitelist
entries.

I encourage anyone who experiences the issues noted above to install this patch.

_____________________________

Andrew Zammit Tabona
GFI Software
Blog: www.gfi.com/blog - Twitter: www.twitter.com/gfisoftware - YouTube: www.youtube.com/gfisoftware

(in reply to RSP)
Post #: 5
RE: Whitelisted - Still getting trapped - 23.Sep.2009 1:44:32 PM   
AFlowers

 

Posts: 165
Joined: 12.Feb.2007
Status: offline
 
Hi Andrew.  Does this patch work with 14?  I haven't installed 14.1 yet - still seeing too many issues to feel comfortable with it.  ME 14 is doing such a good job that I hate to jiggle it.  Thanks!

(in reply to AndrewZT)
Post #: 6
RE: Whitelisted - Still getting trapped - 24.Sep.2009 9:40:43 AM   
AndrewZT

 

Posts: 103
Joined: 28.Jul.2004
Status: offline
AFlowers,

To answer your question: No, this patch does not work with GFI MailEssentials 14. It can only be installed on GFI MailEssentials 14.1 build 20090826 and up.

_____________________________

Andrew Zammit Tabona
GFI Software
Blog: www.gfi.com/blog - Twitter: www.twitter.com/gfisoftware - YouTube: www.youtube.com/gfisoftware

(in reply to AFlowers)
Post #: 7
RE: Whitelisted - Still getting trapped - 2.Oct.2009 2:12:34 AM   
JFL

 

Posts: 6
Joined: 29.Jul.2009
Status: offline
Hello,
I have the bug, installed the patch, reboot the server (to be sure to reload the DLL), but the issue persists.

That is :
I have mail coming from a whitelisted email address, blocked with "Email header contains a malformed MIME From: field" cause.
The address has been added in whitelist for both SMTP and MIME.

Below the header of such a mail (it is a successfull delivery report).
I run GFI MailEssentials 14.1 build 20090826
with ME14_PATCH_20090911_01
and ME141_PATCH_20090917_01 .
on a Windows Server 2003 SP2 (32 bits) in IIS mode (Exchange 2003 on a separate server).

The filter order is
1-Directory Harvesting in SMTP mode
2-IP Whitelist
3-DNS blacklists
4-SPF
5-Blacklists
6-Email\Domain\Auto Whitelist
7-SpamRazer
8-Spam URI Realtime BlockLits
9-Phishing
10- Keyword Whitelist (actually not used)
11-Baesian Analysis
12-Header Checking
13-Keyword Checking 


Microsoft Mail Internet Headers Version 2.0
Received: from mail pickup service by xxxxxxxxxxxxx with Microsoft SMTPSVC;
Thu, 1 Oct 2009 18:14:16 +0200
x-endofinjectedxheaders:4095
MIME-Version: 1.0
Received: from xxxxxxxxxxxxxxxx by xxxxxxxxxxxxxxxx with Microsoft SMTPSVC(6.0.3790.3959); Thu, 1 Oct 2009 18:14:14 +0200
Received: from xxxxxxxxxxxxxxxx (xxxxxxxxxxxxxxxxxxxxxx)by xxxxxxxxxxxxxx
(Postfix) with ESMTP id 6D38091E7EDfor <xxxxxxxxxxxxxx@xxxxxxxxxxxx>; Thu,  1 Oct 2009 18:14:14 +0200 (CEST)
Received: by xxxxxxxxxxxxxxxxxx (Postfix)id 2A247B1C05F; Thu,  1 Oct 2009 18:14:14 +0200 (CEST)
Date: Thu,  1 Oct 2009 18:14:14 +0200 (CEST)
From: xxxxxxxxxxxx@xxxxxxxxxxxx (Mail Delivery System)            <-----whitelisted email address
Subject: xxxxxx@xxxxxxxxxxx - Successful Mail Delivery Report - Email header contains a malformed MIME From: field
To: xxxxxxxxxxxxxx@xxxxxxxxxxxxx
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;boundary="6F611B1C054.1254413654/xxxxxxxxxxxxxxx"
Message-Id:
Return-Path: <>
X-OriginalArrivalTime: 01 Oct 2009 16:14:14.0570 (UTC) FILETIME=[381088A0:01CA42B2]
Old-Message-ID: <20091001161414.2A247B1C05F@xxxxxxxxxxxxxxxxx>
--6F611B1C054.1254413654/xxxxxxxxxxxxxxxxxxxxx
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii
--6F611B1C054.1254413654/xxxxxxxxxxxxxxxxxxxxx
Content-Description: Delivery report
Content-Type: message/delivery-status
--6F611B1C054.1254413654/xxxxxxxxxxxxxxxxxxxxx
Content-Description: Message Headers
Content-Type: text/rfc822-headers

--6F611B1C054.1254413654/xxxxxxxxxxxxxxxxxxxxx--

(in reply to AFlowers)
Post #: 8
RE: Whitelisted - Still getting trapped - 14.Oct.2009 10:50:27 AM   
jgobbel

 

Posts: 1
Joined: 14.Oct.2009
Status: offline
quote:

ORIGINAL: AndrewZT

There is a patch you can install to resolve this issue:
http://ftp.gfisoftware.com/patches/me14/20090826/ME141_PATCH_20090917_01.zip

This patch should be applied to installations of the following
builds of GFI MailEssentials 14.1 and above:

-> 20090826



Is there any reason why this patch would not show in "Product Patches?"  I have that build, and had to manually download and install the DLL.

(in reply to AndrewZT)
Post #: 9
RE: Whitelisted - Still getting trapped - 14.Oct.2009 11:04:24 AM   
RSP

 

Posts: 1441
Joined: 31.Oct.2006
From: The East Riding of Yorkshire, UK
Status: online
quote:

ORIGINAL: jgobbel
Is there any reason why this patch would not show in "Product Patches?"  I have that build, and had to manually download and install the DLL.

http://forums.gfi.com/Patch_check_always_fails_to_determine_available_patches/m_900781839/tm.htm

_____________________________

Disclaimer: I don't work for GFI, I just use their products.

(in reply to jgobbel)
Post #: 10
Page:   [1]
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> Whitelisted - Still getting trapped Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts