RE: [Declude.JunkMail] Can someone help?
Hi, I only bring this up because I can't tell you how often I have run into power users and server administrators trying to debug some application problem who were convinced they had no "permission" problems - because their security log showed nothing. Not only did they not understand that auditing had been off - they had no idea how to turn it on to trace a problem to its roots. Auditing is a key aspect of running a secure system. Shipping a "secure" operating system with failure auditing turned off borders on a security vulnerability in my mind. >> create a huge security log file depending upon the configuration of the security log file. << If by default it would only audit "failure", then the log file should not be huge at all. I have never set up a machine (server OR workstation) where failure logging was off and never encountered any log size issues. In, fact if there ARE failures, then in most cases you do WANT to know about it. There may be certain folders where you expect "logon" errors, so you adjust the auditing for those folders. By inspecting the security log I've often identified client site problems (e.g., failed attempts to update web site files by the application) and was able to fix things for them before they even realized that there WAS a problem with their web site. >> Second, auditing can produce a lot of data, even if configured very narrowly << Yes, "success" auditing could. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 03, 2006 02:37 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Can someone help? > To turn on auditing (which I never understand, why it's not turned on > by default in Windows) - MS gives you quite a run-around: First, in the NT 4.0 days, auditing could easily use up resources and create a huge security log file depending upon the configuration of the security log file. Second, auditing can produce a lot of data, even if configured very narrowly, that one then has to wade through. > - Windows Explorer - go to the root directories of each disk, > properties, security, Advanced, Auditing, add the "Everyone" user and > mark the "failed" > checkmarks for the complete list of accesses (I personally also audit > successful change permissions and take ownership). Apply this and let > it propagate to all subfolders. > > - Local Security Policy - to to "Local Policies", "Audit Policies" and turn > on all failures. (I personally also audit successful account > management and > audit policy changes). Actually, what I do for my servers and for client, is in the Default domain policy (local security policy if no domain,) enable those auditing policies that are appropriate (not all are needed for normal business) AND enable both success and failure on object access. NOTE that auditing of object access is the ONLY auditing that requires 2 steps. All other auditing takes affect without further intervention. Then, only when needed, (or if by company policy they want to track changes to files in a particular folder such as say payroll data sheets) I go to the folders properties that I want to audit and enable auditing again for what is needed only. Once I am done auditing, I disable on that directory. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Can someone help?
Thanks to everyone for your input. It is GREATLY appreciated. I was finally able to figure it out. In IIS, the anonoymus logon was using a User account and not an Admin account. I changed it and it worked, thank the Lord! I'm off to bed before i drop. Goodnight all and THANK YOU again! - Original Message - From: "John T (Lists)" <[EMAIL PROTECTED]> To: Sent: Friday, November 03, 2006 1:36 AM Subject: RE: [Declude.JunkMail] Can someone help? > To turn on auditing (which I never understand, why it's not turned on by > default in Windows) - MS gives you quite a run-around: First, in the NT 4.0 days, auditing could easily use up resources and create a huge security log file depending upon the configuration of the security log file. Second, auditing can produce a lot of data, even if configured very narrowly, that one then has to wade through. > - Windows Explorer - go to the root directories of each disk, properties, > security, Advanced, Auditing, add the "Everyone" user and mark the "failed" > checkmarks for the complete list of accesses (I personally also audit > successful change permissions and take ownership). Apply this and let it > propagate to all subfolders. > > - Local Security Policy - to to "Local Policies", "Audit Policies" and turn > on all failures. (I personally also audit successful account management and > audit policy changes). Actually, what I do for my servers and for client, is in the Default domain policy (local security policy if no domain,) enable those auditing policies that are appropriate (not all are needed for normal business) AND enable both success and failure on object access. NOTE that auditing of object access is the ONLY auditing that requires 2 steps. All other auditing takes affect without further intervention. Then, only when needed, (or if by company policy they want to track changes to files in a particular folder such as say payroll data sheets) I go to the folders properties that I want to audit and enable auditing again for what is needed only. Once I am done auditing, I disable on that directory. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Can someone help?
> To turn on auditing (which I never understand, why it's not turned on by > default in Windows) - MS gives you quite a run-around: First, in the NT 4.0 days, auditing could easily use up resources and create a huge security log file depending upon the configuration of the security log file. Second, auditing can produce a lot of data, even if configured very narrowly, that one then has to wade through. > - Windows Explorer - go to the root directories of each disk, properties, > security, Advanced, Auditing, add the "Everyone" user and mark the "failed" > checkmarks for the complete list of accesses (I personally also audit > successful change permissions and take ownership). Apply this and let it > propagate to all subfolders. > > - Local Security Policy - to to "Local Policies", "Audit Policies" and turn > on all failures. (I personally also audit successful account management and > audit policy changes). Actually, what I do for my servers and for client, is in the Default domain policy (local security policy if no domain,) enable those auditing policies that are appropriate (not all are needed for normal business) AND enable both success and failure on object access. NOTE that auditing of object access is the ONLY auditing that requires 2 steps. All other auditing takes affect without further intervention. Then, only when needed, (or if by company policy they want to track changes to files in a particular folder such as say payroll data sheets) I go to the folders properties that I want to audit and enable auditing again for what is needed only. Once I am done auditing, I disable on that directory. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Can someone help?
Andy, how do i let it propagate to all folders? I'm sorry guys, i'm used to Linux when it comes to permissions. Also, you said... Local Policies", "Audit Policies" and turn on all failures. (I personally also audit successful account management and audit policy changes). Where is Local Policies and Audit Policies? - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Friday, November 03, 2006 12:51 AM Subject: RE: [Declude.JunkMail] Can someone help? Hi Linda, To turn on auditing (which I never understand, why it's not turned on by default in Windows) - MS gives you quite a run-around: - Windows Explorer - go to the root directories of each disk, properties, security, Advanced, Auditing, add the "Everyone" user and mark the "failed" checkmarks for the complete list of accesses (I personally also audit successful change permissions and take ownership). Apply this and let it propagate to all subfolders. - Local Security Policy - to to "Local Policies", "Audit Policies" and turn on all failures. (I personally also audit successful account management and audit policy changes). After doing this, any access rejection will appear in the security event log. I don't know how anyone manages any server (or workstation) without having that information at your finger tips. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda Pagillo Sent: Friday, November 03, 2006 01:14 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Can someone help? Thanks so much for your reply, Andy. I do get prompted with the NTFS logon screen. I forgot to mention that. When i put in my user name and password, it gives me the page can't be displayed and then i can't get back to where it prompts me again.. How do i turn on auditing for object access and which folders do i have to do this for? - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Thursday, November 02, 2006 11:53 PM Subject: RE: [Declude.JunkMail] Can someone help? Hi, I don't have a solution - just a pointer. When I go to that particular screen, I get an NTFS logon screen. Apparently you don't get prompted - I wonder why? Do you have auditing turned for object access and against your folders in Windows Explorer? Then the security log might show if there is some permission problem. Now, I remember I didn't do anything special. I installed a new Win 2003 SP1 system, set up a new IIS site and then installed Imail. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, November 03, 2006 12:34 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Can someone help? Hey guys, I know this isn't an Imail list, but i really need some help. I'm running Imail 2006.1 on Windows 2003 server SP1. I can log into my WebAdmin interface with no problem, but if i try to manage my Imail services, i get a page can't be displayed. I can click on anything else in the WebAdmin screen and it takes my to it with no problems, i just can't get to my services. I think it has something to do with IIS, but i'm lost and tired. Could someone please help me with this? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Can someone help?
Linda, I'm pretty sure that the access is limited to only Administrator group accounts, so make sure that you login with that. There is a KB article about this exact error also: http://support.ipswitch.com/kb/IM-20051206-DM05.htm Just in case you run into other issues with permissions, you will want to check the following article also. I found that when specifying directories outside of the IMail tree that you had to set the permissions manually for proper IIS access (such as IUSR access to the spool when on a different drive). http://support.ipswitch.com/kb/IM-20060214-JH01.htm After you are done with this stuff, you will need to convert the old address books to the new one: http://support.ipswitch.com/kb/IM-20060627-JH01.htm I would also recommend turning off the dictionary attack prevention in the SMTP properties by setting the limit very high and the time period very low. I ran into an issue on 2006.1 where setting everything to 0 did not functionally disable this, and if you are running a gateway, it is best to not block your gateway :) Matt Linda Pagillo wrote: Matt, i did what you said.. i now have anonomyus and basic auth checked. I'm getting a little closer because now i get this error instead of a "page can't be displayed": SWbemLocator error '80041003' Access denied /IAdmin/IMail/services/ServicesAdmin.asp, line 61 Any ideas? If you have any further questions, please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Ext.7008 Linda Pagillo Technical Support Engineer Declude - Your Email security is our business 978.499.2933 office 978.477.8930 efax [EMAIL PROTECTED] www.declude.com - Original Message - From: "Matt" <[EMAIL PROTECTED]> To: Sent: Friday, November 03, 2006 12:11 AM Subject: Re: [Declude.JunkMail] Can someone help? If the authentication pop-up doesn't appear, that would mean that you only have anonymous access checked on the site or virtual directory in IIS. Going in and adding something like Basic Auth should generate the pop-up. I seem to recall having to make this adjustment on a server that I set up. Matt Andy Schmidt wrote: Hi, I don't have a solution - just a pointer. When I go to that particular screen, I get an NTFS logon screen. Apparently you don't get prompted - I wonder why? Do you have auditing turned for object access and against your folders in Windows Explorer? Then the security log might show if there is some permission problem. Now, I remember I didn't do anything special. I installed a new Win 2003 SP1 system, set up a new IIS site and then installed Imail. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of [EMAIL PROTECTED] Sent: Friday, November 03, 2006 12:34 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Can someone help? Hey guys, I know this isn't an Imail list, but i really need some help. I'm running Imail 2006.1 on Windows 2003 server SP1. I can log into my WebAdmin interface with no problem, but if i try to manage my Imail services, i get a page can't be displayed. I can click on anything else in the WebAdmin screen and it takes my to it with no problems, i just can't get to my services. I think it has something to do with IIS, but i'm lost and tired. Could someone please help me with this? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Can someone help?
Hm, If you DO see the NTFS screen and are logging in with a valid NT administrator account, then maybe we need to know more about the "page can't be displayed" message. Maybe post a screenshot so that we can see the URL and the full text of the message and whether there are any HTTP status codes displayed as part of the message etc. Also, I assume you did already check the application and system logs to see if your action generated any entries? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda Pagillo Sent: Friday, November 03, 2006 01:14 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Can someone help? Thanks so much for your reply, Andy. I do get prompted with the NTFS logon screen. I forgot to mention that. When i put in my user name and password, it gives me the page can't be displayed and then i can't get back to where it prompts me again.. How do i turn on auditing for object access and which folders do i have to do this for? - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Thursday, November 02, 2006 11:53 PM Subject: RE: [Declude.JunkMail] Can someone help? Hi, I don't have a solution - just a pointer. When I go to that particular screen, I get an NTFS logon screen. Apparently you don't get prompted - I wonder why? Do you have auditing turned for object access and against your folders in Windows Explorer? Then the security log might show if there is some permission problem. Now, I remember I didn't do anything special. I installed a new Win 2003 SP1 system, set up a new IIS site and then installed Imail. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, November 03, 2006 12:34 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Can someone help? Hey guys, I know this isn't an Imail list, but i really need some help. I'm running Imail 2006.1 on Windows 2003 server SP1. I can log into my WebAdmin interface with no problem, but if i try to manage my Imail services, i get a page can't be displayed. I can click on anything else in the WebAdmin screen and it takes my to it with no problems, i just can't get to my services. I think it has something to do with IIS, but i'm lost and tired. Could someone please help me with this? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Can someone help?
Hi Linda, To turn on auditing (which I never understand, why it's not turned on by default in Windows) - MS gives you quite a run-around: - Windows Explorer - go to the root directories of each disk, properties, security, Advanced, Auditing, add the "Everyone" user and mark the "failed" checkmarks for the complete list of accesses (I personally also audit successful change permissions and take ownership). Apply this and let it propagate to all subfolders. - Local Security Policy - to to "Local Policies", "Audit Policies" and turn on all failures. (I personally also audit successful account management and audit policy changes). After doing this, any access rejection will appear in the security event log. I don't know how anyone manages any server (or workstation) without having that information at your finger tips. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda Pagillo Sent: Friday, November 03, 2006 01:14 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Can someone help? Thanks so much for your reply, Andy. I do get prompted with the NTFS logon screen. I forgot to mention that. When i put in my user name and password, it gives me the page can't be displayed and then i can't get back to where it prompts me again.. How do i turn on auditing for object access and which folders do i have to do this for? - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Thursday, November 02, 2006 11:53 PM Subject: RE: [Declude.JunkMail] Can someone help? Hi, I don't have a solution - just a pointer. When I go to that particular screen, I get an NTFS logon screen. Apparently you don't get prompted - I wonder why? Do you have auditing turned for object access and against your folders in Windows Explorer? Then the security log might show if there is some permission problem. Now, I remember I didn't do anything special. I installed a new Win 2003 SP1 system, set up a new IIS site and then installed Imail. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, November 03, 2006 12:34 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Can someone help? Hey guys, I know this isn't an Imail list, but i really need some help. I'm running Imail 2006.1 on Windows 2003 server SP1. I can log into my WebAdmin interface with no problem, but if i try to manage my Imail services, i get a page can't be displayed. I can click on anything else in the WebAdmin screen and it takes my to it with no problems, i just can't get to my services. I think it has something to do with IIS, but i'm lost and tired. Could someone please help me with this? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Can someone help?
Matt, i did what you said.. i now have anonomyus and basic auth checked. I'm getting a little closer because now i get this error instead of a "page can't be displayed": SWbemLocator error '80041003' Access denied /IAdmin/IMail/services/ServicesAdmin.asp, line 61 Any ideas? If you have any further questions, please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Ext.7008 Linda Pagillo Technical Support Engineer Declude - Your Email security is our business 978.499.2933 office 978.477.8930 efax [EMAIL PROTECTED] www.declude.com - Original Message - From: "Matt" <[EMAIL PROTECTED]> To: Sent: Friday, November 03, 2006 12:11 AM Subject: Re: [Declude.JunkMail] Can someone help? > If the authentication pop-up doesn't appear, that would mean that you > only have anonymous access checked on the site or virtual directory in > IIS. Going in and adding something like Basic Auth should generate the > pop-up. I seem to recall having to make this adjustment on a server > that I set up. > > Matt > > > > Andy Schmidt wrote: > > Hi, > > > > I don't have a solution - just a pointer. When I go to that particular > > screen, I get an NTFS logon screen. Apparently you don't get prompted - I > > wonder why? > > > > Do you have auditing turned for object access and against your folders in > > Windows Explorer? Then the security log might show if there is some > > permission problem. > > > > Now, I remember I didn't do anything special. I installed a new Win 2003 SP1 > > system, set up a new IIS site and then installed Imail. > > > > Best Regards > > Andy Schmidt > > > > Phone: +1 201 934-3414 x20 (Business) > > Fax:+1 201 934-9206 > > > > > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > > [EMAIL PROTECTED] > > Sent: Friday, November 03, 2006 12:34 AM > > To: declude.junkmail@declude.com > > Subject: [Declude.JunkMail] Can someone help? > > > > > > Hey guys, I know this isn't an Imail list, but i really need some help. I'm > > running Imail 2006.1 on Windows 2003 server SP1. I can log into my WebAdmin > > interface with no problem, but if i try to manage my Imail services, i get a > > page can't be displayed. I can click on anything else in the WebAdmin screen > > and it takes my to it with no problems, i just can't get to my services. I > > think it has something to do with IIS, but i'm lost and tired. Could someone > > please help me with this? > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > > Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > > > > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Can someone help?
If the authentication pop-up doesn't appear, that would mean that you only have anonymous access checked on the site or virtual directory in IIS. Going in and adding something like Basic Auth should generate the pop-up. I seem to recall having to make this adjustment on a server that I set up. Matt Andy Schmidt wrote: Hi, I don't have a solution - just a pointer. When I go to that particular screen, I get an NTFS logon screen. Apparently you don't get prompted - I wonder why? Do you have auditing turned for object access and against your folders in Windows Explorer? Then the security log might show if there is some permission problem. Now, I remember I didn't do anything special. I installed a new Win 2003 SP1 system, set up a new IIS site and then installed Imail. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, November 03, 2006 12:34 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Can someone help? Hey guys, I know this isn't an Imail list, but i really need some help. I'm running Imail 2006.1 on Windows 2003 server SP1. I can log into my WebAdmin interface with no problem, but if i try to manage my Imail services, i get a page can't be displayed. I can click on anything else in the WebAdmin screen and it takes my to it with no problems, i just can't get to my services. I think it has something to do with IIS, but i'm lost and tired. Could someone please help me with this? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Can someone help?
Accessing the services page requires authentication to the OS since specific credentials are required to start/stop services. If you have tweaked the IIS security for the IAdmin page, this may be what is happening. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Thursday, November 02, 2006 9:34 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] Can someone help? > > Hey guys, I know this isn't an Imail list, but i really need some help. I'm running Imail > 2006.1 on Windows 2003 server SP1. I can log into my WebAdmin interface with no > problem, but if i try to manage my Imail services, i get a page can't be displayed. I > can click on anything else in the WebAdmin screen and it takes my to it with no > problems, i just can't get to my services. I think it has something to do with IIS, but > i'm lost and tired. Could someone please help me with this? > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Can someone help?
Thanks so much for your reply, Andy. I do get prompted with the NTFS logon screen. I forgot to mention that. When i put in my user name and password, it gives me the page can't be displayed and then i can't get back to where it prompts me again.. How do i turn on auditing for object access and which folders do i have to do this for? - Original Message - From: "Andy Schmidt" <[EMAIL PROTECTED]> To: Sent: Thursday, November 02, 2006 11:53 PM Subject: RE: [Declude.JunkMail] Can someone help? Hi, I don't have a solution - just a pointer. When I go to that particular screen, I get an NTFS logon screen. Apparently you don't get prompted - I wonder why? Do you have auditing turned for object access and against your folders in Windows Explorer? Then the security log might show if there is some permission problem. Now, I remember I didn't do anything special. I installed a new Win 2003 SP1 system, set up a new IIS site and then installed Imail. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, November 03, 2006 12:34 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Can someone help? Hey guys, I know this isn't an Imail list, but i really need some help. I'm running Imail 2006.1 on Windows 2003 server SP1. I can log into my WebAdmin interface with no problem, but if i try to manage my Imail services, i get a page can't be displayed. I can click on anything else in the WebAdmin screen and it takes my to it with no problems, i just can't get to my services. I think it has something to do with IIS, but i'm lost and tired. Could someone please help me with this? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Can someone help?
Hi, I don't have a solution - just a pointer. When I go to that particular screen, I get an NTFS logon screen. Apparently you don't get prompted - I wonder why? Do you have auditing turned for object access and against your folders in Windows Explorer? Then the security log might show if there is some permission problem. Now, I remember I didn't do anything special. I installed a new Win 2003 SP1 system, set up a new IIS site and then installed Imail. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, November 03, 2006 12:34 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Can someone help? Hey guys, I know this isn't an Imail list, but i really need some help. I'm running Imail 2006.1 on Windows 2003 server SP1. I can log into my WebAdmin interface with no problem, but if i try to manage my Imail services, i get a page can't be displayed. I can click on anything else in the WebAdmin screen and it takes my to it with no problems, i just can't get to my services. I think it has something to do with IIS, but i'm lost and tired. Could someone please help me with this? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Can someone help me get this blocked?
> 1: BASE64: We have any email coming with BASE64 as HOLD - simply the weight is enough to put the emial on hold. - In your case this email would be a HOLD. We hardly see any legitimate email with BASE64. Let us not forget that some e-mail clients always use BASE64 by poor design of the programmers/company that made them. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Can someone help me get this blocked?
Title: Message Kami, Thanks. The e-mail was already being held and I’ve upped the weight of the base 64 from 4 to 8. I’ve also added a filter file with some of the test you have suggested. I think you have saved me from having to review about 100 e-mails a day from this jerk. Thanks for this solution and your quick reply on a Sunday! Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Sunday, February 23, 2003 12:04 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Can someone help me get this blocked? Hi again... I just realized that I forgot to mention: MAILFROM 20 CONTAINSsalestoday in your filter file will also add a weight to the email. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno Sent: Sunday, February 23, 2003 11:26 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Can someone help me get this blocked? These of e-mails have been flooding my hold folder. I’m running Declude pro. I have a delete weight of 40 and a hold weight of 30. All this spam has been right between. Is there something I can add to either bump up this weight by about 7 or is there something unique in here that I can filter upon that I don’t see? It has been coming from random IPs and the sender has been “salestoday(random crap)@lycos”. I was thinking of bouncing anything from @lycos but this will result in many bounced messages that won’t get delivered. And I’m not sure I just want to delete anything from lycos. Any suggestions would be greatly appreciated. Marc Received: from lycos.com [200.131.216.16] by mail.prudentialrand.com (SMTPD32-7.13) id AD41C450058; Sat, 22 Feb 2003 16:36:01 -0500 Received: from 169.142.51.247 ([169.142.51.247]) by n1.groups.yahoo.com with QMQP; Sat, 22 Feb 2003 05:45:22 - Message-ID: <[EMAIL PROTECTED]> From: "This information will help." <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [SPAM]ADV:Need help with Marketing your Web Site? Date: Sat, 22 Feb 2003 01:49:54 +0800 MiME-Version: 1.0 Content-Type: multipart/mixed; boundary="=_NextPart_000_00V8_70Y81A1B.C1122G33" X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?200.131.216.16 X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [a040010f]. X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 200.131.216.16 with no reverse DNS entry. X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [a040010f]. X-RBL-Warning: WEIGHT25: Weight of 33 reaches or exceeds the limit of 25. X-Declude-Sender: [EMAIL PROTECTED] [200.131.216.16] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP, NOPOSTMASTER, BADHEADERS, BASE64, IPNOTINMX, REVDNS, ROUTING, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25, WEIGHT30 --=_NextPart_000_00V8_70Y81A1B.C1122G33
RE: [Declude.JunkMail] Can someone help me get this blocked?
Title: Message Marc, You can use a filter (well documented as far as how to set them up) with an entry of HEADERS 10 CONTAINS which will add a weight of 10. George -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc CatuognoSent: Sunday, February 23, 2003 11:26 AMTo: [EMAIL PROTECTED]Subject: [Declude.JunkMail] Can someone help me get this blocked? These of e-mails have been flooding my hold folder. I’m running Declude pro. I have a delete weight of 40 and a hold weight of 30. All this spam has been right between. Is there something I can add to either bump up this weight by about 7 or is there something unique in here that I can filter upon that I don’t see? It has been coming from random IPs and the sender has been “salestoday(random crap)@lycos”. I was thinking of bouncing anything from @lycos but this will result in many bounced messages that won’t get delivered. And I’m not sure I just want to delete anything from lycos. Any suggestions would be greatly appreciated. Marc Received: from lycos.com [200.131.216.16] by mail.prudentialrand.com (SMTPD32-7.13) id AD41C450058; Sat, 22 Feb 2003 16:36:01 -0500 Received: from 169.142.51.247 ([169.142.51.247]) by n1.groups.yahoo.com with QMQP; Sat, 22 Feb 2003 05:45:22 - Message-ID: <[EMAIL PROTECTED]> From: "This information will help." <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [SPAM]ADV:Need help with Marketing your Web Site? Date: Sat, 22 Feb 2003 01:49:54 +0800 MiME-Version: 1.0 Content-Type: multipart/mixed; boundary="=_NextPart_000_00V8_70Y81A1B.C1122G33" X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?200.131.216.16 X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [a040010f]. X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 200.131.216.16 with no reverse DNS entry. X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [a040010f]. X-RBL-Warning: WEIGHT25: Weight of 33 reaches or exceeds the limit of 25. X-Declude-Sender: [EMAIL PROTECTED] [200.131.216.16] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP, NOPOSTMASTER, BADHEADERS, BASE64, IPNOTINMX, REVDNS, ROUTING, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25, WEIGHT30 --=_NextPart_000_00V8_70Y81A1B.C1122G33
RE: [Declude.JunkMail] Can someone help me get this blocked?
Title: Message Hi again... I just realized that I forgot to mention: MAILFROM 20 CONTAINSsalestoday in your filter file will also add a weight to the email. Regards, Kami -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc CatuognoSent: Sunday, February 23, 2003 11:26 AMTo: [EMAIL PROTECTED]Subject: [Declude.JunkMail] Can someone help me get this blocked? These of e-mails have been flooding my hold folder. I’m running Declude pro. I have a delete weight of 40 and a hold weight of 30. All this spam has been right between. Is there something I can add to either bump up this weight by about 7 or is there something unique in here that I can filter upon that I don’t see? It has been coming from random IPs and the sender has been “salestoday(random crap)@lycos”. I was thinking of bouncing anything from @lycos but this will result in many bounced messages that won’t get delivered. And I’m not sure I just want to delete anything from lycos. Any suggestions would be greatly appreciated. Marc Received: from lycos.com [200.131.216.16] by mail.prudentialrand.com (SMTPD32-7.13) id AD41C450058; Sat, 22 Feb 2003 16:36:01 -0500 Received: from 169.142.51.247 ([169.142.51.247]) by n1.groups.yahoo.com with QMQP; Sat, 22 Feb 2003 05:45:22 - Message-ID: <[EMAIL PROTECTED]> From: "This information will help." <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [SPAM]ADV:Need help with Marketing your Web Site? Date: Sat, 22 Feb 2003 01:49:54 +0800 MiME-Version: 1.0 Content-Type: multipart/mixed; boundary="=_NextPart_000_00V8_70Y81A1B.C1122G33" X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?200.131.216.16 X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [a040010f]. X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 200.131.216.16 with no reverse DNS entry. X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [a040010f]. X-RBL-Warning: WEIGHT25: Weight of 33 reaches or exceeds the limit of 25. X-Declude-Sender: [EMAIL PROTECTED] [200.131.216.16] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP, NOPOSTMASTER, BADHEADERS, BASE64, IPNOTINMX, REVDNS, ROUTING, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25, WEIGHT30 --=_NextPart_000_00V8_70Y81A1B.C1122G33
RE: [Declude.JunkMail] Can someone help me get this blocked?
Title: Message Hi; Some of the lessons learned ... 1: BASE64: We have any email coming with BASE64 as HOLD - simply the weight is enough to put the emial on hold. - In your case this email would be a HOLD. We hardly see any legitimate email with BASE64. 2: We have a FROMFILTER list that includes all the free emails (except hotmail & yahoo.com). These get an additional weight of 5. In your case this email coming from Lycos would have had an additional weight of 5. 3: You can simply add to your FROMFILE the beginning of that email address: salestoday e.g. HEADERS5 CONTAINS salestoday this will catch that text in the header. I wish we had wildcards in the FROM filter but we don't. For now searching the header with that name will do the same. In your case this would have definitely caught the mail since the salestoday can hardly be considered coming from a legit address. An additional weight of 10 to this text would solve your problem. With any of these additions you can easily elevate this email. One idea that has worked great for us is the separation of all filters in separate files. This way we have more freedom in changing weight and figuring out what is going on. e.g. FILTER-HEADER filter d:\IMail\Declude\IMail_Filter_Header.txt x 0 0FILTER-MAILFROM filter d:\IMail\Declude\IMail_Filter_MailFrom.txt x 0 0FILTER-BODY filter d:\IMail\Declude\IMail_Filter_TextinBody.txt x 0 0FILTER-SUBJECT filter d:\IMail\Declude\IMail_Filter_TextinSubject.txt x 0 0FILTER-BODYURL filter d:\IMail\Declude\IMail_Filter_URLinBody.txt x 0 0FILTER-BODYPHONE filter d:\IMail\Declude\IMail_Filter_PhoneinBody.txt x 0 0FILTER-IPINBODY filter D:\IMail\Declude\IMail_Filter_IPinBody.txt x 30 0 FILTER-BODY-BLACKLIST filter d:\IMail\Declude\IMail_Filter_BlacklistinBody.txt x 20 0FILTER-HEADER-BLACKLIST filter d:\IMail\Declude\IMail_Filter_BlacklistinHeader.txt x 20 0FILTER-BODY-FREEEMAIL filter d:\IMail\Declude\IMail_Filter_FreeeMailinBody.txt x 5 0 We simply have a different file for each filter type. Hope this helps.. Regards, Kami -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc CatuognoSent: Sunday, February 23, 2003 11:26 AMTo: [EMAIL PROTECTED]Subject: [Declude.JunkMail] Can someone help me get this blocked? These of e-mails have been flooding my hold folder. I’m running Declude pro. I have a delete weight of 40 and a hold weight of 30. All this spam has been right between. Is there something I can add to either bump up this weight by about 7 or is there something unique in here that I can filter upon that I don’t see? It has been coming from random IPs and the sender has been “salestoday(random crap)@lycos”. I was thinking of bouncing anything from @lycos but this will result in many bounced messages that won’t get delivered. And I’m not sure I just want to delete anything from lycos. Any suggestions would be greatly appreciated. Marc Received: from lycos.com [200.131.216.16] by mail.prudentialrand.com (SMTPD32-7.13) id AD41C450058; Sat, 22 Feb 2003 16:36:01 -0500 Received: from 169.142.51.247 ([169.142.51.247]) by n1.groups.yahoo.com with QMQP; Sat, 22 Feb 2003 05:45:22 - Message-ID: <[EMAIL PROTECTED]> From: "This information will help." <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [SPAM]ADV:Need help with Marketing your Web Site? Date: Sat, 22 Feb 2003 01:49:54 +0800 MiME-Version: 1.0 Content-Type: multipart/mixed; boundary="=_NextPart_000_00V8_70Y81A1B.C1122G33" X-Mailer: Microsoft Outlook, Build 10.0.2627 Importance: Normal X-RBL-Warning: SPAMCOP: Blocked - see http://spamcop.net/bl.shtml?200.131.216.16 X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [a040010f]. X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail. X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 200.131.216.16 with no reverse DNS entry. X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [a040010f]. X-RBL-Warning: WEIGHT25: Weight of 33 reaches or exceeds the limit of 25. X-Declude-Sender: [EMAIL PROTECTED] [200.131.216.16] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP, NOPOSTMASTER, BADHEADERS, BASE64, IPNOTINMX, REVDNS, ROUTING, WEIGHT10, WEIGHT20, WEIGHT15, WEIGHT25, WEIGHT30 --=_NextPart_000_00V8_70Y81A1B.C1122G33
