Re[2]: [IMail Forum] SMTP-Relay / Auth only FROM valid email Adresses

2006-03-28 Thread Matti Haack
We are a SERVICE Provider, so we
want to provide a good service to our customers. After the first issue
from  them,  they  cleaned up all Maschines, but the proplem reappered
two wekks later.
Maybe  it  is some mobile device which gets attached to their network.

So  Yes,  I  shut  down  their  service  weeks ago. They told me, they
corrected  the  problem, I reactivated the account and after two weeks
it   happend   again...  Unfortunatly  they  can't send from their DUP
Provider,  as  they  force  them  to use the providers free eMail
Adress.

The  main  Problem  is that this spammings normaly happens during night time. So
I  am  looking  for  a method to prevent them (and other customers) to
start this again.  When we detect it (kiwi-Syslog sends alarm), it is normally
to late and our queue is filled with bounces which has to be removed manually.
To mitigate this problem, I made a small script wich monitors the queue
size  and send alarm messages, if the queue grows unusual.

As the from adress  is faked to, we got masses of bounces. - And the sender has 
no
idea what he did...

So  do  you  have  any  Idea  how  to force users to a special from:
domain?  Technical,  not idiological...

With best regards
 Matti Haack

I have some problem with the way IMAL (8.x) handles SMTP-Auth email. A
customer  from  us  seems to have a compromised host, which sends Spam
evry two weeks or so trough their local gateway

 tell them that you will not relay outbound mail that has been 
 submitted to their system without SMTP AUTH.

 Since they are spamming you from a trusted IP, you show them your 
 logs and shut them off until they fix their system.  In the meantime, 
 their own gateway can send directly to Internet and shift the problem 
 onto them.

  - which is relayed over our IMAIL Server.

Their  Mail  server requires no authentification for their local hosts
to send mail

 I'd be surprised if a mail-bot/trojan in a compromised machine is 
 doing SMTP AUTH to submit spam to their mail server. Their mail 
 server is more likely doing relay for addresses.

 Len


 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
 List Archive:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


- 
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de



Dieses Dokument ist ausschliesslich fuer den Adressaten bestimmt.
Jegliche Art von Reproduktion, Verbreitung, Vervielfaeltigung, Modifikation, 
Verteilung und/oder Publikation dieser E-Mail-Nachricht ist untersagt, 
soweit dies nicht  ausdruecklich genehmigt wurde. Jegliche Haftung fur 
Ansprueche,  die aufgrund der Kommunikation per E-Mail begruendet 
werden koennten, ist ausgeschlossen, soweit der Haftungsausschluss 
gesetzlich zulaessig ist.  

-- Ausgehende E-Mail wurde auf Viren gescannt  --
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


Re: Re[2]: [IMail Forum] SMTP-Relay / Auth only FROM valid email Adresses

2006-03-28 Thread Dave Doherty
You could set up a special gateway dedicated only to them. Put it on a timer 
so it only runs during the day.


But you really have to solve the problem or help them to do that. Maybe they 
would hire you as a consultant to do just that.


Presumably, you could check the logs to determine the originating IP and 
track the source down that way. If not, then use process of elimination - 
what is left on at night?


-d



- Original Message - 
From: Matti Haack [EMAIL PROTECTED]

To: Len Conrad Imail_Forum@list.ipswitch.com
Sent: Tuesday, March 28, 2006 4:58 AM
Subject: Re[2]: [IMail Forum] SMTP-Relay / Auth only FROM valid email 
Adresses




We are a SERVICE Provider, so we
want to provide a good service to our customers. After the first issue
from  them,  they  cleaned up all Maschines, but the proplem reappered
two wekks later.
Maybe  it  is some mobile device which gets attached to their network.

So  Yes,  I  shut  down  their  service  weeks ago. They told me, they
corrected  the  problem, I reactivated the account and after two weeks
it   happend   again...  Unfortunatly  they  can't send from their DUP
Provider,  as  they  force  them  to use the providers free eMail
Adress.

The  main  Problem  is that this spammings normaly happens during night 
time. So

I  am  looking  for  a method to prevent them (and other customers) to
start this again.  When we detect it (kiwi-Syslog sends alarm), it is 
normally
to late and our queue is filled with bounces which has to be removed 
manually.

To mitigate this problem, I made a small script wich monitors the queue
size  and send alarm messages, if the queue grows unusual.

As the from adress  is faked to, we got masses of bounces. - And the 
sender has no

idea what he did...

So  do  you  have  any  Idea  how  to force users to a special from:
domain?  Technical,  not idiological...

With best regards
Matti Haack


I have some problem with the way IMAL (8.x) handles SMTP-Auth email. A
customer  from  us  seems to have a compromised host, which sends Spam
evry two weeks or so trough their local gateway



tell them that you will not relay outbound mail that has been
submitted to their system without SMTP AUTH.



Since they are spamming you from a trusted IP, you show them your
logs and shut them off until they fix their system.  In the meantime,
their own gateway can send directly to Internet and shift the problem
onto them.



 - which is relayed over our IMAIL Server.

Their  Mail  server requires no authentification for their local hosts
to send mail



I'd be surprised if a mail-bot/trojan in a compromised machine is
doing SMTP AUTH to submit spam to their mail server. Their mail
server is more likely doing relay for addresses.



Len




To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



-
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de



Dieses Dokument ist ausschliesslich fuer den Adressaten bestimmt.
Jegliche Art von Reproduktion, Verbreitung, Vervielfaeltigung, 
Modifikation,

Verteilung und/oder Publikation dieser E-Mail-Nachricht ist untersagt,
soweit dies nicht  ausdruecklich genehmigt wurde. Jegliche Haftung fur
Ansprueche,  die aufgrund der Kommunikation per E-Mail begruendet
werden koennten, ist ausgeschlossen, soweit der Haftungsausschluss
gesetzlich zulaessig ist.

-- Ausgehende E-Mail wurde auf Viren gescannt  --
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/




To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


[IMail Forum] spam stuck in the spool

2006-03-28 Thread Matrosity Hosting




This problem is growing since 8.x but we're getting
spam stuck in the spool folder. This used to be nice since we could
review the files and add any url's to the url-domain but now it's
becoming a pain. They aren't getting processed but are 100% spam and it
would be better if they got processed by imail. There was a thread a
while back on this but is anyone else still getting this?





Re: [IMail Forum] SMTP-Relay / Auth only FROM valid email Adresses

2006-03-28 Thread Adam Campbell

Have you found the IP address of the host?

Should not it be easy to find it in one of the spam messages?

adamc

Matti Haack wrote:

We are a SERVICE Provider, so we want to provide a good service to
our customers. After the first issue from  them,  they  cleaned up
all Maschines, but the proplem reappered two wekks later. Maybe  it
is some mobile device which gets attached to their network.

So  Yes,  I  shut  down  their  service  weeks ago. They told me,
they corrected  the  problem, I reactivated the account and after two
weeks it   happend   again...  Unfortunatly  they  can't send from
their DUP Provider,  as  they  force  them  to use the providers free
eMail Adress.

The  main  Problem  is that this spammings normaly happens during
night time. So I  am  looking  for  a method to prevent them (and
other customers) to start this again.  When we detect it (kiwi-Syslog
sends alarm), it is normally to late and our queue is filled with
bounces which has to be removed manually. To mitigate this problem, I
made a small script wich monitors the queue size  and send alarm
messages, if the queue grows unusual.

As the from adress  is faked to, we got masses of bounces. - And the
sender has no idea what he did...

So  do  you  have  any  Idea  how  to force users to a special
from: domain?  Technical,  not idiological...

With best regards Matti Haack


I have some problem with the way IMAL (8.x) handles SMTP-Auth
email. A customer  from  us  seems to have a compromised host,
which sends Spam evry two weeks or so trough their local gateway


tell them that you will not relay outbound mail that has been 
submitted to their system without SMTP AUTH.


Since they are spamming you from a trusted IP, you show them your 
logs and shut them off until they fix their system.  In the

meantime, their own gateway can send directly to Internet and shift
the problem onto them.



- which is relayed over our IMAIL Server.

Their  Mail  server requires no authentification for their local
hosts to send mail


I'd be surprised if a mail-bot/trojan in a compromised machine is 
doing SMTP AUTH to submit spam to their mail server. Their mail 
server is more likely doing relay for addresses.



Len


- Matti Haack - Hit Haack IT Service Gmbh Poltlbauer Weg 4, D-94036
Passau +49 851 50477-22 Fax: +49 851 50477-29 http://www.haack-it.de


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


Re: [Fwd: RE: [IMail Forum] [IMail 8.15] James Mason - SIS-E000192470 [T20060322001D]]

2006-03-28 Thread Eric Shanbrom
If [EMAIL PROTECTED] is on machine A sending a message to 
[EMAIL PROTECTED] on machine B it will never get there if using the home 
IMail server as their outbound MTA. IMail doesn't send all mail through the 
gateway. It only send remote mail through the gateway and since 
example.com is defined on both servers you will get an envelope rejection 
right after the RCPT TO unless the peer list is active.


Eric S
- Original Message - 
From: Len Conrad [EMAIL PROTECTED]

To: Imail_Forum@list.ipswitch.com
Sent: Monday, March 27, 2006 8:26 PM
Subject: Re: [Fwd: RE: [IMail Forum] [IMail 8.15] James Mason - 
SIS-E000192470 [T20060322001D]]





This will work except you must point your local users to the IMGate 
machine as well otherwise inter-domain mail where the users are on 
different machines won't work


For Imail domain users to send to recipients of peered domains on other 
machines, each Imail box runs send all mail to gateway of IMGate.  A 
peered IMail domain doesn't have probe other peered machines to find the 
recipient's account.  Imail msgs to off-machine peered domains go to 
gateway IMGate which then relays directly to the correct Imail machine.


Len



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


Re: [IMail Forum] spam stuck in the spool

2006-03-28 Thread Eric Shanbrom



Are you getting both the "Q" and "D" files or just 
the "D" files? On the SMTP service what do you have set for the NUll Sender 
retry with delete?

Eric S

  - Original Message - 
  From: 
  Matrosity 
  Hosting 
  To: Imail_Forum@list.ipswitch.com 
  
  Sent: Tuesday, March 28, 2006 7:58 
  AM
  Subject: [IMail Forum] spam stuck in the 
  spool
  This problem is growing since 8.x but we're 
  getting spam stuck in the spool folder. This used to be nice since we could 
  review the files and add any url's to the url-domain but now it's becoming a 
  pain. They aren't getting processed but are 100% spam and it would be better 
  if they got processed by imail. There was a thread a while back on this but is 
  anyone else still getting this?


Re: [IMail Forum] spam stuck in the spool

2006-03-28 Thread Matrosity Hosting




they appear to be stuck with "T" files. We have 2
retried and delete checked.

Eric Shanbrom wrote:

  
  
  
  Are you getting both the "Q" and "D"
files or just the "D" files? On the SMTP service what do you have set
for the NUll Sender retry with delete?
  
  Eric S
  
-
Original Message - 
From:
Matrosity
Hosting 
To:
Imail_Forum@list.ipswitch.com

Sent:
Tuesday, March 28, 2006 7:58 AM
Subject:
[IMail Forum] spam stuck in the spool


This problem is growing since 8.x but we're getting
spam stuck in the spool folder. This used to be nice since we could
review the files and add any url's to the url-domain but now it's
becoming a pain. They aren't getting processed but are 100% spam and it
would be better if they got processed by imail. There was a thread a
while back on this but is anyone else still getting this?






Re[2]: [IMail Forum] SMTP-Relay / Auth only FROM valid email Adresses

2006-03-28 Thread Matti Haack

 Have you found the IP address of the host?

 Should not it be easy to find it in one of the spam messages?
They  use  some  local  mailserver  (ken? Jana? or something like this) which
relays  the  mail  to us. So the mails are orginating from this server
and  uses  the  account  configured  in  this server. It's some old NT
machine and will be replaced in future.
But  the  real Problem is: Anyone from our customers could encounter a
problem  like  this.  So  I am looking for a way to prevent it. But it
seems  as  I have to use another mail-server to be shure that it could
not  happen  again.

So  what  I  am  looking  for:  I like to force users to use the email
adress as mail-from, which they used to authenticate on our Server. Is
this possible with imail? Registry hack? Filter rule? Script?

Everyone  of you who offers SMTP Services to customers could encounter
thisproblem,  that  a  Virus or Trojan send lots of UCE with faked
adress-lines to anybody.

Greetings
 Matti
 





- 
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de



Dieses Dokument ist ausschliesslich fuer den Adressaten bestimmt.
Jegliche Art von Reproduktion, Verbreitung, Vervielfaeltigung, Modifikation, 
Verteilung und/oder Publikation dieser E-Mail-Nachricht ist untersagt, 
soweit dies nicht  ausdruecklich genehmigt wurde. Jegliche Haftung fur 
Ansprueche,  die aufgrund der Kommunikation per E-Mail begruendet 
werden koennten, ist ausgeschlossen, soweit der Haftungsausschluss 
gesetzlich zulaessig ist.  

-- Ausgehende E-Mail wurde auf Viren gescannt  --
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


[IMail Forum] Rule to forward mail based on X-RCPT-TO:

2006-03-28 Thread Beach Computers
Having trouble finding out how to forward a mail (syntax) if the header
contains X-RCPT-TO: [EMAIL PROTECTED]
Anyone have any suggestions?

Thanks


 
Dave
 
 ---
|Beach Computers|
|Affordable Hosting Solutions   |
|http://www.beachcomp.com   |
 ===
|Cheap Domain Warehouse |
|Get Your Own Dot!  |
|http://www.cheapdomainwarehouse.com|
 -- 


Disclaimer and confidentiality note:

The contents of this communication are intended/meant only for addressee(s)
and may contain information that is privileged or otherwise confidential.
If you are not the intended recipient you are hereby notified that any
disclosure, copying, distribution or taking any action in reliance on the
contents of this information is strictly prohibited and may be unlawful.
The contents of this e-mail shall not be forwarded to any third party. If
you have received this electronic mail transmission in error, please delete
it from your system without copying or forwarding it, and notify the sender
of the error by reply email, so that the sender's address records
can be corrected.
Views and opinions are solely those of the sender unless clearly indicated
as being that of Beach Computers or any of it's affiliated companies.
Beach Computers cannot assure that the integrity of this communication has
been maintained or that it is free of errors, virus, interception or
interference.



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


Re: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

2006-03-28 Thread Martin Schaible
Hi Dave,

a few weeks ago, we made the experience that the X-RCPT-TO can't be used. This 
data will be written at the moment, the message will be appended to the mail 
box file. So, it's too late to catch it with a rule. 


Am Dienstag, 28. März 2006 um 18:39 schrieben Sie:

 Having trouble finding out how to forward a mail (syntax) if the header
 contains X-RCPT-TO: [EMAIL PROTECTED]
 Anyone have any suggestions?

 Thanks


  
 Dave
  
  ---
 |Beach Computers|
 |Affordable Hosting Solutions   |
 |http://www.beachcomp.com   |
  ===
 |Cheap Domain Warehouse |
 |Get Your Own Dot!  |
 |http://www.cheapdomainwarehouse.com|
  -- 

 
 Disclaimer and confidentiality note:

 The contents of this communication are intended/meant only for addressee(s)
 and may contain information that is privileged or otherwise confidential.
 If you are not the intended recipient you are hereby notified that any
 disclosure, copying, distribution or taking any action in reliance on the
 contents of this information is strictly prohibited and may be unlawful.
 The contents of this e-mail shall not be forwarded to any third party. If
 you have received this electronic mail transmission in error, please delete
 it from your system without copying or forwarding it, and notify the sender
 of the error by reply email, so that the sender's address records
 can be corrected.
 Views and opinions are solely those of the sender unless clearly indicated
 as being that of Beach Computers or any of it's affiliated companies.
 Beach Computers cannot assure that the integrity of this communication has
 been maintained or that it is free of errors, virus, interception or
 interference.



 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
 List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



-- 
 
Mit freundlichen Grüssen


Merlin Consulting
Martin Schaible
Bahnhofstrasse 27
CH-8702 Zollikon

Phone:   +41 44 391 30 00
Fax: +41 44 391 32 49

Mail:mailto:[EMAIL PROTECTED]
URL: http://www.merlinconsulting.ch
Support: http://support.merlinconsulting.ch

GPS: N47 20.235 E8 34.226

News - Neue Produkte:

.:. NOD32 Antivirus System
.:. BlueDragon
.:. Kiwi Syslog Monitor
.:. Paessler GmbH
.:. Sawmill Loganalyzer
.:. SmarterTools



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


RE: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

2006-03-28 Thread Beach Computers
Hmm..
So I have an issue.. Lets see if anyone can think of a solution.

I have an alias that has been found out by spammers.
The alias forwards to a cell and 2 other emails.
Imail is catching the sender as SPAM and flagging it, but since rules don’t
seem to apply to aliases, it forwards anyway.

I have a rule (#1) that says if it's spam, delete it.
So, what I need is to have a rule (#2) that says if an email is sent to
[EMAIL PROTECTED], either as the to, cc, or bcc, then forward it to
[EMAIL PROTECTED]

Using 8.12.

Any ideas?

Thanks


 
Dave
 
 ---
|Beach Computers|
|Affordable Hosting Solutions   |
|http://www.beachcomp.com   |
 ===
|Cheap Domain Warehouse |
|Get Your Own Dot!  |
|http://www.cheapdomainwarehouse.com|
 -- 


Disclaimer and confidentiality note:

The contents of this communication are intended/meant only for addressee(s)
and may contain information that is privileged or otherwise confidential.
If you are not the intended recipient you are hereby notified that any
disclosure, copying, distribution or taking any action in reliance on the
contents of this information is strictly prohibited and may be unlawful.
The contents of this e-mail shall not be forwarded to any third party. If
you have received this electronic mail transmission in error, please delete
it from your system without copying or forwarding it, and notify the sender
of the error by reply email, so that the sender's address records
can be corrected.
Views and opinions are solely those of the sender unless clearly indicated
as being that of Beach Computers or any of it's affiliated companies.
Beach Computers cannot assure that the integrity of this communication has
been maintained or that it is free of errors, virus, interception or
interference.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Martin Schaible
Sent: Tuesday, March 28, 2006 11:45 AM
To: Beach Computers
Subject: Re: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

Hi Dave,

a few weeks ago, we made the experience that the X-RCPT-TO can't be used.
This data will be written at the moment, the message will be appended to the
mail box file. So, it's too late to catch it with a rule. 


Am Dienstag, 28. März 2006 um 18:39 schrieben Sie:

 Having trouble finding out how to forward a mail (syntax) if the 
 header contains X-RCPT-TO: [EMAIL PROTECTED] Anyone have any 
 suggestions?

 Thanks


  
 Dave
  
  ---
 |Beach Computers|
 |Affordable Hosting Solutions   |
 |http://www.beachcomp.com   |
  ===
 |Cheap Domain Warehouse |
 |Get Your Own Dot!  |
 |http://www.cheapdomainwarehouse.com|
  --

 
 Disclaimer and confidentiality note:

 The contents of this communication are intended/meant only for 
 addressee(s) and may contain information that is privileged or otherwise
confidential.
 If you are not the intended recipient you are hereby notified that any 
 disclosure, copying, distribution or taking any action in reliance on 
 the contents of this information is strictly prohibited and may be
unlawful.
 The contents of this e-mail shall not be forwarded to any third party. 
 If you have received this electronic mail transmission in error, 
 please delete it from your system without copying or forwarding it, 
 and notify the sender of the error by reply email, so that the 
 sender's address records can be corrected.
 Views and opinions are solely those of the sender unless clearly 
 indicated as being that of Beach Computers or any of it's affiliated
companies.
 Beach Computers cannot assure that the integrity of this communication 
 has been maintained or that it is free of errors, virus, interception 
 or interference.



 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
 List Archive: 
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



-- 
 
Mit freundlichen Grüssen


Merlin Consulting
Martin Schaible
Bahnhofstrasse 27
CH-8702 Zollikon

Phone:   +41 44 391 30 00
Fax: +41 44 391 32 49

Mail:mailto:[EMAIL PROTECTED]
URL: http://www.merlinconsulting.ch
Support: http://support.merlinconsulting.ch

GPS: N47 20.235 E8 34.226

News - Neue Produkte:

.:. NOD32 Antivirus System
.:. BlueDragon
.:. Kiwi Syslog Monitor
.:. Paessler GmbH
.:. Sawmill Loganalyzer
.:. SmarterTools



To Unsubscribe: 

Re: [Fwd: RE: [IMail Forum] [IMail 8.15] James Mason - SIS-E000192470 [T20060322001D]]

2006-03-28 Thread Len Conrad


If [EMAIL PROTECTED] is on machine A sending a message to 
[EMAIL PROTECTED] on machine B it will never get there if using 
the home IMail server as their outbound MTA. IMail doesn't send all 
mail through the gateway. It only send remote mail through the 
gateway and since example.com is defined on both servers you will 
get an envelope rejection right after the RCPT TO unless the peer 
list is active.


ok, peering is active, but only works for peered domain users sending 
from Imail-A to Imail-B, which is typically (much) less that 10% of 
total traffic.  The vast majority of traffic is inbound via MX, and 
IMGate would relay that traffic precisely to the user's mailbox 
server, so peering wouldn't kick in.


Typically a peering system does it to distribute the mailbox 
load.  IMGate also removes tons of other work and abuse from the 
Imail boxes, as well as pre-routing MX traffic so the peers don't 
have to probe the peers.


Len



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


Re: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

2006-03-28 Thread Adam Campbell

Use outbound rules?

How about creating a mailbox instead of the alias and putting in a main.fwd?

adamc

Beach Computers wrote:

Hmm..
So I have an issue.. Lets see if anyone can think of a solution.

I have an alias that has been found out by spammers.
The alias forwards to a cell and 2 other emails.
Imail is catching the sender as SPAM and flagging it, but since rules don’t
seem to apply to aliases, it forwards anyway.

I have a rule (#1) that says if it's spam, delete it.
So, what I need is to have a rule (#2) that says if an email is sent to
[EMAIL PROTECTED], either as the to, cc, or bcc, then forward it to
[EMAIL PROTECTED]

Using 8.12.

Any ideas?

Thanks

Dave
 
 ---

|Beach Computers|
|Affordable Hosting Solutions   |
|http://www.beachcomp.com   |
 ===
|Cheap Domain Warehouse |
|Get Your Own Dot!  |
|http://www.cheapdomainwarehouse.com|
 -- 



Disclaimer and confidentiality note:

The contents of this communication are intended/meant only for addressee(s)
and may contain information that is privileged or otherwise confidential.
If you are not the intended recipient you are hereby notified that any
disclosure, copying, distribution or taking any action in reliance on the
contents of this information is strictly prohibited and may be unlawful.
The contents of this e-mail shall not be forwarded to any third party. If
you have received this electronic mail transmission in error, please delete
it from your system without copying or forwarding it, and notify the sender
of the error by reply email, so that the sender's address records
can be corrected.
Views and opinions are solely those of the sender unless clearly indicated
as being that of Beach Computers or any of it's affiliated companies.
Beach Computers cannot assure that the integrity of this communication has
been maintained or that it is free of errors, virus, interception or
interference.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Martin Schaible
Sent: Tuesday, March 28, 2006 11:45 AM
To: Beach Computers
Subject: Re: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

Hi Dave,

a few weeks ago, we made the experience that the X-RCPT-TO can't be used.
This data will be written at the moment, the message will be appended to the
mail box file. So, it's too late to catch it with a rule. 



Am Dienstag, 28. März 2006 um 18:39 schrieben Sie:

Having trouble finding out how to forward a mail (syntax) if the 
header contains X-RCPT-TO: [EMAIL PROTECTED] Anyone have any 
suggestions?



Thanks



Dave
 
 ---

|Beach Computers|
|Affordable Hosting Solutions   |
|http://www.beachcomp.com   |
 ===
|Cheap Domain Warehouse |
|Get Your Own Dot!  |
|http://www.cheapdomainwarehouse.com|
 --




Disclaimer and confidentiality note:


The contents of this communication are intended/meant only for 
addressee(s) and may contain information that is privileged or otherwise

confidential.
If you are not the intended recipient you are hereby notified that any 
disclosure, copying, distribution or taking any action in reliance on 
the contents of this information is strictly prohibited and may be

unlawful.
The contents of this e-mail shall not be forwarded to any third party. 
If you have received this electronic mail transmission in error, 
please delete it from your system without copying or forwarding it, 
and notify the sender of the error by reply email, so that the 
sender's address records can be corrected.
Views and opinions are solely those of the sender unless clearly 
indicated as being that of Beach Computers or any of it's affiliated

companies.
Beach Computers cannot assure that the integrity of this communication 
has been maintained or that it is free of errors, virus, interception 
or interference.


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


RE: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

2006-03-28 Thread Beach Computers
This is for incoming mail though.
How would outbound rule help? 


 
Dave
 
 ---
|Beach Computers|
|Affordable Hosting Solutions   |
|http://www.beachcomp.com   |
 ===
|Cheap Domain Warehouse |
|Get Your Own Dot!  |
|http://www.cheapdomainwarehouse.com|
 -- 


Disclaimer and confidentiality note:

The contents of this communication are intended/meant only for addressee(s)
and may contain information that is privileged or otherwise confidential.
If you are not the intended recipient you are hereby notified that any
disclosure, copying, distribution or taking any action in reliance on the
contents of this information is strictly prohibited and may be unlawful.
The contents of this e-mail shall not be forwarded to any third party. If
you have received this electronic mail transmission in error, please delete
it from your system without copying or forwarding it, and notify the sender
of the error by reply email, so that the sender's address records
can be corrected.
Views and opinions are solely those of the sender unless clearly indicated
as being that of Beach Computers or any of it's affiliated companies.
Beach Computers cannot assure that the integrity of this communication has
been maintained or that it is free of errors, virus, interception or
interference.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Adam Campbell
Sent: Tuesday, March 28, 2006 12:20 PM
To: Imail_Forum@list.ipswitch.com
Subject: Re: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

Use outbound rules?

How about creating a mailbox instead of the alias and putting in a main.fwd?

adamc

Beach Computers wrote:
 Hmm..
 So I have an issue.. Lets see if anyone can think of a solution.
 
 I have an alias that has been found out by spammers.
 The alias forwards to a cell and 2 other emails.
 Imail is catching the sender as SPAM and flagging it, but since rules 
 don’t seem to apply to aliases, it forwards anyway.
 
 I have a rule (#1) that says if it's spam, delete it.
 So, what I need is to have a rule (#2) that says if an email is sent 
 to [EMAIL PROTECTED], either as the to, cc, or bcc, then forward it to 
 [EMAIL PROTECTED]
 
 Using 8.12.
 
 Any ideas?
 
 Thanks
 
 Dave
  
  ---
 |Beach Computers|
 |Affordable Hosting Solutions   |
 |http://www.beachcomp.com   |
  ===
 |Cheap Domain Warehouse |
 |Get Your Own Dot!  |
 |http://www.cheapdomainwarehouse.com|
  --
 
 
 Disclaimer and confidentiality note:
 
 The contents of this communication are intended/meant only for 
 addressee(s) and may contain information that is privileged or otherwise
confidential.
 If you are not the intended recipient you are hereby notified that any 
 disclosure, copying, distribution or taking any action in reliance on 
 the contents of this information is strictly prohibited and may be
unlawful.
 The contents of this e-mail shall not be forwarded to any third party. 
 If you have received this electronic mail transmission in error, 
 please delete it from your system without copying or forwarding it, 
 and notify the sender of the error by reply email, so that the 
 sender's address records can be corrected.
 Views and opinions are solely those of the sender unless clearly 
 indicated as being that of Beach Computers or any of it's affiliated
companies.
 Beach Computers cannot assure that the integrity of this communication 
 has been maintained or that it is free of errors, virus, interception 
 or interference.
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Martin 
 Schaible
 Sent: Tuesday, March 28, 2006 11:45 AM
 To: Beach Computers
 Subject: Re: [IMail Forum] Rule to forward mail based on X-RCPT-TO:
 
 Hi Dave,
 
 a few weeks ago, we made the experience that the X-RCPT-TO can't be used.
 This data will be written at the moment, the message will be appended 
 to the mail box file. So, it's too late to catch it with a rule.
 
 
 Am Dienstag, 28. März 2006 um 18:39 schrieben Sie:
 
 Having trouble finding out how to forward a mail (syntax) if the 
 header contains X-RCPT-TO: [EMAIL PROTECTED] Anyone have any 
 suggestions?
 
 Thanks
 
 Dave
  
  ---
 |Beach Computers|
 |Affordable Hosting Solutions   |
 |http://www.beachcomp.com   |
  ===
 |Cheap Domain Warehouse |
 |Get Your Own Dot!  |
 |http://www.cheapdomainwarehouse.com|
  --
 
 
 Disclaimer and 

RE: [IMail Forum] spam stuck in the spool

2006-03-28 Thread Daniel Donnelly



T files are _not_ 
email (message content was not fully delivered to IMail), just delete 
them!

Is your SMTP service 
being stopped by something on a regular basis? Any message in process at that 
time could result in one or more T files.

Daniel 
Donnelly

-Original Message-From: 
[EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]On Behalf Of Matrosity 
HostingSent: Tuesday, March 28, 2006 8:51 AMTo: 
Imail_Forum@list.ipswitch.comSubject: Re: [IMail Forum] spam stuck in 
the spoolthey appear to be stuck with "T" 
files. We have 2 retried and delete checked.Eric Shanbrom wrote: 

  
  

  Are you getting both the "Q" and "D" files or 
  just the "D" files? On the SMTP service what do you have set for the NUll 
  Sender retry with delete?
  
  Eric S
  
- 
Original Message - 
From: 
Matrosity 
Hosting 
To: 
Imail_Forum@list.ipswitch.com 

Sent: 
Tuesday, March 28, 2006 7:58 AM
Subject: 
[IMail Forum] spam stuck in the spool
This problem is growing since 8.x but we're 
getting spam stuck in the spool folder. This used to be nice since we could 
review the files and add any url's to the url-domain but now it's becoming a 
pain. They aren't getting processed but are 100% spam and it would be better 
if they got processed by imail. There was a thread a while back on this but 
is anyone else still getting 
this?


Re: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

2006-03-28 Thread Adam Campbell
When you said that it forwards to 2 other emails, I assumed emails on 
another host.


adamc

Beach Computers wrote:

This is for incoming mail though.
How would outbound rule help? 


Dave
 
 ---

|Beach Computers|
|Affordable Hosting Solutions   |
|http://www.beachcomp.com   |
 ===
|Cheap Domain Warehouse |
|Get Your Own Dot!  |
|http://www.cheapdomainwarehouse.com|
 -- 



Disclaimer and confidentiality note:

The contents of this communication are intended/meant only for addressee(s)
and may contain information that is privileged or otherwise confidential.
If you are not the intended recipient you are hereby notified that any
disclosure, copying, distribution or taking any action in reliance on the
contents of this information is strictly prohibited and may be unlawful.
The contents of this e-mail shall not be forwarded to any third party. If
you have received this electronic mail transmission in error, please delete
it from your system without copying or forwarding it, and notify the sender
of the error by reply email, so that the sender's address records
can be corrected.
Views and opinions are solely those of the sender unless clearly indicated
as being that of Beach Computers or any of it's affiliated companies.
Beach Computers cannot assure that the integrity of this communication has
been maintained or that it is free of errors, virus, interception or
interference.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Adam Campbell
Sent: Tuesday, March 28, 2006 12:20 PM
To: Imail_Forum@list.ipswitch.com
Subject: Re: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

Use outbound rules?

How about creating a mailbox instead of the alias and putting in a main.fwd?

adamc

Beach Computers wrote:

Hmm..
So I have an issue.. Lets see if anyone can think of a solution.

I have an alias that has been found out by spammers.
The alias forwards to a cell and 2 other emails.
Imail is catching the sender as SPAM and flagging it, but since rules 
don’t seem to apply to aliases, it forwards anyway.


I have a rule (#1) that says if it's spam, delete it.
So, what I need is to have a rule (#2) that says if an email is sent 
to [EMAIL PROTECTED], either as the to, cc, or bcc, then forward it to 
[EMAIL PROTECTED]


Using 8.12.

Any ideas?

Thanks

Dave
 
 ---

|Beach Computers|
|Affordable Hosting Solutions   |
|http://www.beachcomp.com   |
 ===
|Cheap Domain Warehouse |
|Get Your Own Dot!  |
|http://www.cheapdomainwarehouse.com|
 --


Disclaimer and confidentiality note:

The contents of this communication are intended/meant only for 
addressee(s) and may contain information that is privileged or otherwise

confidential.
If you are not the intended recipient you are hereby notified that any 
disclosure, copying, distribution or taking any action in reliance on 
the contents of this information is strictly prohibited and may be

unlawful.
The contents of this e-mail shall not be forwarded to any third party. 
If you have received this electronic mail transmission in error, 
please delete it from your system without copying or forwarding it, 
and notify the sender of the error by reply email, so that the 
sender's address records can be corrected.
Views and opinions are solely those of the sender unless clearly 
indicated as being that of Beach Computers or any of it's affiliated

companies.
Beach Computers cannot assure that the integrity of this communication 
has been maintained or that it is free of errors, virus, interception 
or interference.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Martin 
Schaible

Sent: Tuesday, March 28, 2006 11:45 AM
To: Beach Computers
Subject: Re: [IMail Forum] Rule to forward mail based on X-RCPT-TO:

Hi Dave,

a few weeks ago, we made the experience that the X-RCPT-TO can't be used.
This data will be written at the moment, the message will be appended 
to the mail box file. So, it's too late to catch it with a rule.



Am Dienstag, 28. März 2006 um 18:39 schrieben Sie:

Having trouble finding out how to forward a mail (syntax) if the 
header contains X-RCPT-TO: [EMAIL PROTECTED] Anyone have any 
suggestions?

Thanks
Dave
 
 ---

|Beach Computers|
|Affordable Hosting Solutions   |
|http://www.beachcomp.com   |
 ===
|Cheap Domain Warehouse |
|Get Your Own Dot!  |
|http://www.cheapdomainwarehouse.com|
 --

Re: [Fwd: RE: [IMail Forum] [IMail 8.15] James Mason - SIS-E000192470 [T20060322001D]]

2006-03-28 Thread Eric Shanbrom
Was not disputing you Len. Just wanted all the bases covered so there 
weren't any surprises


Eric S
- Original Message - 
From: Len Conrad [EMAIL PROTECTED]

To: Imail_Forum@list.ipswitch.com
Sent: Tuesday, March 28, 2006 12:02 PM
Subject: Re: [Fwd: RE: [IMail Forum] [IMail 8.15] James Mason - 
SIS-E000192470 [T20060322001D]]





If [EMAIL PROTECTED] is on machine A sending a message to 
[EMAIL PROTECTED] on machine B it will never get there if using the home 
IMail server as their outbound MTA. IMail doesn't send all mail through 
the gateway. It only send remote mail through the gateway and since 
example.com is defined on both servers you will get an envelope rejection 
right after the RCPT TO unless the peer list is active.


ok, peering is active, but only works for peered domain users sending from 
Imail-A to Imail-B, which is typically (much) less that 10% of total 
traffic.  The vast majority of traffic is inbound via MX, and IMGate would 
relay that traffic precisely to the user's mailbox server, so peering 
wouldn't kick in.


Typically a peering system does it to distribute the mailbox load.  IMGate 
also removes tons of other work and abuse from the Imail boxes, as well as 
pre-routing MX traffic so the peers don't have to probe the peers.


Len



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


Re: [IMail Forum] spam stuck in the spool

2006-03-28 Thread Matrosity Hosting




smtpd32 is sucking up memory to the tune of 700+ MB's
and we restart it daily. Interestingly most of that memory is
virtual. We've got an open case to figure out what's up but no
resolution yet.

Daniel Donnelly wrote:

  
  
  T
files are _not_ email (message content was not fully delivered to
IMail), just delete them!
  
  Is
your SMTP service being stopped by something on a regular basis? Any
message in process at that time could result in one or more T files.
  
  Daniel
Donnelly
  
  -Original Message-
  From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Matrosity
Hosting
  Sent: Tuesday, March 28, 2006 8:51 AM
  To: Imail_Forum@list.ipswitch.com
  Subject: Re: [IMail Forum] spam stuck in the spool
  
  
  they appear to be stuck with "T" files. We have 2
retried and delete checked.
  
Eric Shanbrom wrote:
  


Are you getting both the "Q" and
"D" files or just the "D" files? On the SMTP service what do you have
set for the NUll Sender retry with delete?

Eric S

  -
Original Message - 
  From:
  Matrosity Hosting 
  To:
  Imail_Forum@list.ipswitch.com
  
  Sent:
Tuesday, March 28, 2006 7:58 AM
  Subject:
[IMail Forum] spam stuck in the spool
  
  
  This problem is growing since 8.x but we're
getting spam stuck in the spool folder. This used to be nice since we
could review the files and add any url's to the url-domain but now it's
becoming a pain. They aren't getting processed but are 100% spam and it
would be better if they got processed by imail. There was a thread a
while back on this but is anyone else still getting this?
  
  





[IMail Forum] feature suggestion

2006-03-28 Thread Matrosity Hosting




I would like to have a place that I can have ANY error
generated from webmail emailed to us so we know there are problems
before a client informs us of one.

Bill





RE: [IMail Forum] spam stuck in the spool

2006-03-28 Thread Daniel Donnelly



Well, a single daily 
restart should not cause more than a few T files be created (I'm assuming you do 
this at night when your users are less likely to be connected and spammers are 
more likely). Do the ones you see in the spool folder have timestamps close to 
the restart time? If they do, then it is likelyone of the causes. If the 
timestamps are more random, there are other possibilities, like the client side terminating 
the connection before completion (a spammer might do this) or a 
networksituation that does the same. I'm not sure that I can help more on 
this

It might be possible 
that these terminated SMTP sessions are affecting memory usage (only a guess, it 
really should not!), so maybe a count of the T files on a daily basis vs the 
memory used by SMTPD32, might show some correlation. Or I may be barking up the 
wrong tree!

Logs may be helpful. 
The T files will have names just like Q/D files, so tracking them in the log 
should be simpler today than in the past. Can you find the same 'X_filename.*' 
names in the logs as the T files? Can you send a sample of the log lines with 
that number in them (to Support, but I'd be happy to look them over here, 
too)?

Daniel 
Donnelly

-Original Message-From: 
[EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]On Behalf Of Matrosity 
HostingSent: Tuesday, March 28, 2006 2:14 PMTo: 
Imail_Forum@list.ipswitch.comSubject: Re: [IMail Forum] spam stuck in 
the spoolsmtpd32 is sucking up memory to the 
tune of 700+ MB's and we restart it daily. Interestingly most of that 
memory is virtual. We've got an open case to figure out what's up but no 
resolution yet.Daniel Donnelly wrote: 

  
  T files are _not_ 
  email (message content was not fully delivered to IMail), just delete 
  them!
  
  Is your SMTP 
  service being stopped by something on a regular basis? Any message in process 
  at that time could result in one or more T files.
  
  Daniel 
  Donnelly
  
  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]On 
  Behalf Of Matrosity HostingSent: Tuesday, March 28, 2006 8:51 
  AMTo: Imail_Forum@list.ipswitch.comSubject: 
  Re: [IMail Forum] spam stuck in the spoolthey appear to be stuck with "T" files. We have 2 retried and delete 
  checked.Eric Shanbrom wrote: 
  



Are you getting both the "Q" and "D" files or 
just the "D" files? On the SMTP service what do you have set for the NUll 
Sender retry with delete?

Eric S

  - 
  Original Message - 
  From: 
  Matrosity Hosting 
  To: 
  Imail_Forum@list.ipswitch.com 
  
  Sent: 
  Tuesday, March 28, 2006 7:58 AM
  Subject: 
  [IMail Forum] spam stuck in the spool
  This problem is growing since 8.x but we're 
  getting spam stuck in the spool folder. This used to be nice since we 
  could review the files and add any url's to the url-domain but now it's 
  becoming a pain. They aren't getting processed but are 100% spam and it 
  would be better if they got processed by imail. There was a thread a while 
  back on this but is anyone else still getting 
  this?


Re: [IMail Forum] spam stuck in the spool

2006-03-28 Thread Matrosity Hosting




The times are not matched to a restart of the service.
I emailed logs to support on this very issue yesterday but haven't
heard back yet.

Bill

Daniel Donnelly wrote:

  
  
  Well,
a single daily restart should not cause more than a few T files be
created (I'm assuming you do this at night when your users are less
likely to be connected and spammers are more likely). Do the ones you
see in the spool folder have timestamps close to the restart time? If
they do, then it is likelyone of the causes. If the timestamps are
more random, there are other possibilities, like the client
side terminating the connection before completion (a spammer might do
this) or a networksituation that does the same. I'm not sure that I
can help more on this
  
  It
might be possible that these terminated SMTP sessions are affecting
memory usage (only a guess, it really should not!), so maybe a count of
the T files on a daily basis vs the memory used by SMTPD32, might show
some correlation. Or I may be barking up the wrong tree!
  
  Logs
may be helpful. The T files will have names just like Q/D files, so
tracking them in the log should be simpler today than in the past. Can
you find the same 'X_filename.*' names in the logs as the T files? Can
you send a sample of the log lines with that number in them (to
Support, but I'd be happy to look them over here, too)?
  
  Daniel
Donnelly
  
  -Original Message-
  From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Matrosity
Hosting
  Sent: Tuesday, March 28, 2006 2:14 PM
  To: Imail_Forum@list.ipswitch.com
  Subject: Re: [IMail Forum] spam stuck in the spool
  
  
  smtpd32 is sucking up memory to the tune of 700+ MB's
and we restart it daily. Interestingly most of that memory is
virtual. We've got an open case to figure out what's up but no
resolution yet.
  
Daniel Donnelly wrote:
  

T
files are _not_ email (message content was not fully delivered to
IMail), just delete them!

Is
your SMTP service being stopped by something on a regular basis? Any
message in process at that time could result in one or more T files.

Daniel
Donnelly

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On
Behalf Of Matrosity Hosting
Sent: Tuesday, March 28, 2006 8:51 AM
To: Imail_Forum@list.ipswitch.com
Subject: Re: [IMail Forum] spam stuck in the spool


they appear to be stuck with "T" files. We have 2
retried and delete checked.

Eric Shanbrom wrote:

  
  
  Are you getting both the "Q" and
"D" files or just the "D" files? On the SMTP service what do you have
set for the NUll Sender retry with delete?
  
  Eric S
  
-
Original Message - 
From:
Matrosity Hosting 
To:
Imail_Forum@list.ipswitch.com

Sent:
Tuesday, March 28, 2006 7:58 AM
Subject:
[IMail Forum] spam stuck in the spool


This problem is growing since 8.x but we're
getting spam stuck in the spool folder. This used to be nice since we
could review the files and add any url's to the url-domain but now it's
becoming a pain. They aren't getting processed but are 100% spam and it
would be better if they got processed by imail. There was a thread a
while back on this but is anyone else still getting this?


  





Re: [IMail Forum] feature suggestion

2006-03-28 Thread Martin Schaible




Hi,

Use a monitoring software like WassUp.


Am Dienstag, 28. Mrz 2006 um 23:06 schrieben Sie:







I would like to have a place that I can have ANY error generated from webmail emailed to us so we know there are problems before a client informs us of one.

Bill








--

Mit freundlichen Grssen


Merlin Consulting
Martin Schaible
Bahnhofstrasse 27
CH-8702 Zollikon

Phone:  +41 44 391 30 00
Fax:   +41 44 391 32 49

Mail:  mailto:[EMAIL PROTECTED]
URL:  http://www.merlinconsulting.ch
Support:http://support.merlinconsulting.ch

GPS:   N47 20.235 E8 34.226

News - Neue Produkte:

.:. NOD32 Antivirus System
.:. BlueDragon
.:. Kiwi Syslog Monitor
.:. Paessler GmbH
.:. Sawmill Loganalyzer
.:. SmarterTools






To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


[IMail Forum] Upgrading to ICS version 3. Any suggestions

2006-03-28 Thread Edward Ford








Anything I should watch out for when I upgrade IMail 8.22 to
ICS version 3 on a Windows 2003 Server Domain Controller, this is going to be
an upgrade for IMail that is already there.





Thank You;

Eddie










Re: [IMail Forum] Upgrading to ICS version 3. Any suggestions

2006-03-28 Thread Christian Heller


Hi Eddie,
I just migrated from 8.22 on an NT server to Imail 2006.02a on a Windows
2003 server. Ipswitch has a document somewhere in their KB that describes
the migration process. Despite following it to a T I ended up
with a bunch of problems that ended up being attributed to incorrect
permissions. Mainly a lack of two sets of permissions on the main imail
folder:
The IUSR_machinename user, and the Network Service account should both
have full control on all of IMail files. So far that seems to have taken
care of most (not all) of our problems.
-Christian
At 04:59 PM 3/28/2006, you wrote:

Anything I should watch out for when
I upgrade IMail 8.22 to ICS version 3 on a Windows 2003 Server Domain
Controller, this is going to be an upgrade for IMail that is already
there.


Thank You;
Eddie


Christian Heller (

mailto:[EMAIL PROTECTED] )
Director - Technical Operations
AACE International
http://www.aacei.org
Phone: 800.858.COST
209 Prairie Avenue, Suite 100
Morgantown, WV 26501, USA

AACE International's 50'th Anniversary Meeting
Total Cost Management - We're All In!
Las Vegas, Nevada
Technical Program from Tuesday, June 20 - Thursday, June
22, 2006

Looking for technical information and articles? Try:

https://www.aacei.org/bookstore/cgi-bin/shop.cgi?page=litsearch.html






Re: [IMail Forum] Upgrading to ICS version 3. Any suggestions

2006-03-28 Thread Matrosity Hosting




I believe the current version is 2006.03 which is MUCH
faster in terms of web messaging,

Bill

Christian Heller wrote:
Hi Eddie,
  
I just migrated from 8.22 on an NT server to Imail 2006.02a on a
Windows
2003 server. Ipswitch has a document somewhere in their KB that
describes
the migration process. Despite following it to a "T" I ended up
with a bunch of problems that ended up being attributed to incorrect
permissions. Mainly a lack of two sets of permissions on the main imail
folder:
The IUSR_machinename user, and the Network Service account should both
have full control on all of IMail files. So far that seems to have
taken
care of most (not all) of our problems.
  
-Christian
  
At 04:59 PM 3/28/2006, you wrote:
  
Anything I should watch out
for when
I upgrade IMail 8.22 to ICS version 3 on a Windows 2003 Server Domain
Controller, this is going to be an upgrade for IMail that is already
there.


Thank You;
Eddie

  
  Christian Heller (
  mailto:[EMAIL PROTECTED]
)
Director - Technical Operations
AACE International
  http://www.aacei.org
  Phone: 800.858.COST
209 Prairie Avenue, Suite 100
Morgantown, WV 26501, USA

AACE International's 50'th Anniversary Meeting
"Total Cost Management - We're All In!"
Las Vegas, Nevada
Technical Program from Tuesday, June 20 - Thursday,
June
22, 2006

Looking for technical information and articles? Try:
  
https://www.aacei.org/bookstore/cgi-bin/shop.cgi?page=litsearch.html
  

  





Re: Re[2]: [IMail Forum] SMTP-Relay / Auth only FROM valid email Adresses

2006-03-28 Thread Dave Doherty

We use Declude Hijack to prevent this sort of thing. It works quite well.

-d


- Original Message - 
From: Matti Haack [EMAIL PROTECTED]

To: Adam Campbell Imail_Forum@list.ipswitch.com
Sent: Tuesday, March 28, 2006 9:33 AM
Subject: Re[2]: [IMail Forum] SMTP-Relay / Auth only FROM valid email 
Adresses






Have you found the IP address of the host?



Should not it be easy to find it in one of the spam messages?
They  use  some  local  mailserver  (ken? Jana? or something like this) 
which

relays  the  mail  to us. So the mails are orginating from this server
and  uses  the  account  configured  in  this server. It's some old NT
machine and will be replaced in future.
But  the  real Problem is: Anyone from our customers could encounter a
problem  like  this.  So  I am looking for a way to prevent it. But it
seems  as  I have to use another mail-server to be shure that it could
not  happen  again.

So  what  I  am  looking  for:  I like to force users to use the email
adress as mail-from, which they used to authenticate on our Server. Is
this possible with imail? Registry hack? Filter rule? Script?

Everyone  of you who offers SMTP Services to customers could encounter
thisproblem,  that  a  Virus or Trojan send lots of UCE with faked
adress-lines to anybody.

Greetings
Matti






-
Matti Haack - Hit Haack IT Service Gmbh
Poltlbauer Weg 4, D-94036 Passau
+49 851 50477-22 Fax: +49 851 50477-29
http://www.haack-it.de



Dieses Dokument ist ausschliesslich fuer den Adressaten bestimmt.
Jegliche Art von Reproduktion, Verbreitung, Vervielfaeltigung, 
Modifikation,

Verteilung und/oder Publikation dieser E-Mail-Nachricht ist untersagt,
soweit dies nicht  ausdruecklich genehmigt wurde. Jegliche Haftung fur
Ansprueche,  die aufgrund der Kommunikation per E-Mail begruendet
werden koennten, ist ausgeschlossen, soweit der Haftungsausschluss
gesetzlich zulaessig ist.

-- Ausgehende E-Mail wurde auf Viren gescannt  --
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/





To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


RE: [IMail Forum] How do I stop this spam

2006-03-28 Thread Andrey Fyodorov
Some people write this off as a mere whitelisting solution, but it is not.
It is a solution that allows you to manage your incoming mail flow based on
IP reputation:

http://www.mujica.com/smtprm.aspx



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rod Dorman
Sent: Monday, March 27, 2006 4:57 PM
To: Imail_Forum@list.ipswitch.com
Subject: Re: [IMail Forum] How do I stop this spam

On Monday, March 27, 2006, 08:44:00, Martin Schaible wrote:
 This means, that your mail server is now a text-only-mail server?

Yeah, I'll vote for that.  Send all viruses in source code with
instructions on how to compile and run it :-)

-- 
[EMAIL PROTECTED] The avalanche has already started, it is too
Rod Dorman  late for the pebbles to vote. - Ambassador Kosh

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


-- 
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.3.3/295 - Release Date: 3/28/2006


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/