GFI Forums: GFI MailEssentials Feedback » No Whitelist available for Email Exploit Engine

Home » Product Feedback » GFI MailEssentials Feedback » No Whitelist available for Email Exploit Engine (No Whitelist available for Email Exploit Engine)

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

No Whitelist available for Email Exploit Engine [message #148204]

Thu, 04 June 2020 00:39

bslaughter
Messages: 2
Registered: June 2020

No Whitelist available for Email Exploit Engine.
After purchasing the EmailSecurity module, I find that the Exploit Engine is blocking an internal report that is sent out daily to administrators from our AV product.
GFI's website recommends disabling the Exploit Engine.
Doesn't seem like much of a solution.
Definitely needs a whitelist, or remove the option entirely and don't sell it.

Report message to a moderator

Re: No Whitelist available for Email Exploit Engine [message #148207 is a reply to message #148204]

Thu, 04 June 2020 11:40

ian.bugeja
Messages: 666
Registered: March 2017
Location: Malta

It is very dangerous to have a whitelist on any EmailSecurity modules as that can lead to intrusion in the network since email addresses can easily be spoofed.

What exploit specifically is being triggered from this email?

You can turn off a specific rule not all the exploit engine.

Ian Bugeja
GFI Software

Report message to a moderator