Thank you Tripp. This response is a good one and it is greatly appreciated.
Mark
Tripp Allen wrote:
The patch is here: http://support.ipswitch.com/kb/IM-20061026-JH01.htm You
need to download the updated smtpprotocol file and follow the instructions
to replace it.
Tripp
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Cert
Sent: Friday, October 27, 2006 1:07 PM
To: Imail_Forum@list.ipswitch.com
Subject: RE: [IMail Forum] Update for SMTP vulnerability in 8.22
Hello!
I am no email expert, and I didn't feel comfortable setting up a full blown
gateway (ASSP, IMGATE, etc...) while waiting for the 8.22 patch, so my
kludge was to just block all external access to my iMail server except from
my backup MXs. I setup an ETRN dequeue to run every so often and despool
mail from the backups. This worked for me because my backup MXs are external
and are not running iMail. I suppose you could also make it work even if you
backups are internal as long as they aren't running iMail.
As far as I know, no one lost any email, although it may have been delayed a
little bit. But hey, better late than never...
Also, this is probably not a very neighborly thing to do for an extended
period of time, but it could be a quick way to buy some short term
protection until a patch/upgrade decision can be made and implemented.
John
At 11:31 AM 10/27/2006, you wrote:
ASSP, IMGATE, , Barracuda and Alligate all sit in front of the mail
server and act as a gateway. If you keep your mail server otherwise
firewalled and have one of these products out in front then the
vulnerability is mitigated (from external sources).
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of
[EMAIL PROTECTED]
Sent: Friday, October 27, 2006 12:28 PM
To: Imail_Forum@list.ipswitch.com
Subject: RE: [IMail Forum] Update for SMTP vulnerability in 8.22
So am I to understand that ASSP somehow prevents the vulnerabtility
>from being a problem?
Mike N
FXOL
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude Virus]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
---
[This E-mail scanned for viruses courtesy of Netslyder,
Inc.(http://www.netslyder.net)]
---
[This E-mail scanned for viruses courtesy of Netslyder,
Inc.(http://www.netslyder.net)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
