Sorry to dig up an old thread, but I was curious if those of you using
ProofPoint Antivirus were also using their Zero Hour module? From reading
their whitepapers, it seems like a pretty intriguing feature to block
"malcode" from being delivered even before antivirus signatures have been
released
That's definetely in there.
Add footer or add disclaimer has a not on response but only original area.
From: Kevin Lundy
Sent: Thursday, November 12, 2009 1:54 PM
To: MS-Exchange Admin Issues
Subject: Re: Ironport users
Well the underlying OS has a very simple solution not available in th
Well the underlying OS has a very simple solution not available in the GUI.
Page 236 of the latest manual as an example for "Signed Rule". Message
filter vs content filter
Guess it goes to show there is value in RTFM every now and then.
Now if I could get it to give me a disclaimer only on new m
Correct a store restart would do it. I also suspect that a store
dismount/remount would also force it to update.
Kind Regards
[cid:image001.jpg@01CA63D1.AA7AF520]
Peter Johnson
I.T Architect
United Kingdom: +44 1285 65842
South Africa: +27 11 252 1100
Swaziland: +268 442 7000
Mobile: +2783 306 0
Not sure then... Might be worth a call to support, they are excellent...
On Thu, Nov 12, 2009 at 9:10 AM, Kevin Lundy wrote:
> Yep, did that. Also did it another way - setup a filter for SSN scanning,
> and used the notify feature. I then sent a signed message, with a fake
> SSN. It quaranti
Yep, did that. Also did it another way - setup a filter for SSN scanning,
and used the notify feature. I then sent a signed message, with a fake
SSN. It quarantined and notified based on the SSN. I then looked at the
notify message (which includes the evaluated headers).
(that was easier than
Yeah, that would imply it's working... Have you looked in the message
tracking to see what values are seen in the header to verify you're
filtering the right one?
On Thu, Nov 12, 2009 at 8:57 AM, Kevin Lundy wrote:
> Not sure what you mean (only had the device about 18 hours). But, I can
> mod
And did you enable the filter (DAMHIKT)?
From: Don Ely
Sent: Thursday, November 12, 2009 8:55 AM
To: MS-Exchange Admin Issues
Subject: Re: Ironport users
Did you attach the filter to the SMTP listener?
On Thu, Nov 12, 2009 at 8:49 AM, Kevin Lundy
mailto:klu...
Not sure what you mean (only had the device about 18 hours). But, I can
modify the filter to filter something else (e.g. a key word rather than a
header), and the filter works. So I assume that means it is attached?
On Thu, Nov 12, 2009 at 11:53 AM, Don Ely wrote:
> Did you attach the filter t
Did you attach the filter to the SMTP listener?
On Thu, Nov 12, 2009 at 8:49 AM, Kevin Lundy wrote:
> Just got a couple of Ironports. I'm trying to write an outgoing content
> filter to identify digitally signed messages. I've tried "Other Header"
> with header name of Content-Type and value c
Just got a couple of Ironports. I'm trying to write an outgoing content
filter to identify digitally signed messages. I've tried "Other Header"
with header name of Content-Type and value contains multipart/signed, or
value contains x-pkcs7-signature.
Can't seem to make it work. Anyone got an id
You can make the permissions happen immediately by restarting the
store... J
Otherwise, do you have some desktop/system management app? Disable the
user account and reboot their PC or at least force a logoff.
From: Rimmel, Carl [mailto:crimm...@hfhs.org]
Sent: Thursday, November 12, 2009 1
Believe me, I didn't forget. Our management doesn't want to wait that long (30
minutes was too long for them) - it has to be immediate.
From: Webster [mailto:carlwebs...@gmail.com]
Sent: Thursday, November 12, 2009 11:38 AM
To: MS-Exchange Admin Issues
Subject: RE: Disconnecting MAPI Connections
You forgot the MBS rule, "Wait at least two hours before complaining".
Webster
From: Rimmel, Carl [mailto:crimm...@hfhs.org]
Subject: RE: Disconnecting MAPI Connections
We waited 30 minutes and nothing.
From: Peter Johnson [mailto:peter.john...@peterstow.com]
Subject: RE: Disco
Not in Exchange 2010 it wouldn’t J
Paul G.
From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk]
Sent: 12 November 2009 16:07
To: MS-Exchange Admin Issues
Subject: RE: Disconnecting MAPI Connections
That would probably do the trick. Moving the mailbox will cause Outlook to lose
i
It's certainly possible to force a MAPI disconnect from a mailbox... I'm not
sure exactly how to accomplish it in isolation, but I do a lot of migration
work with Quest Migration Manager, and quite often encounter situations
where - despite being instructed otherwise - users leave their Outlook
cli
Not true – I can easily move a disabled account. What I can’t do is move a
deleted mailbox. In this case, we had to reconnect the mailbox (which requires
that we re-enable the account), re-disable the account and then move the
mailbox.
From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk]
Se
Moving the mailbox should force a disconnect.
From: John Cook
Sent: Thursday, November 12, 2009 8:00 AM
To: MS-Exchange Admin Issues
Subject: Re: Disconnecting MAPI Connections
Disable the account and move it to another DB maybe?
__
We waited 30 minutes and nothing.
From: Peter Johnson [mailto:peter.john...@peterstow.com]
Sent: Thursday, November 12, 2009 11:08 AM
To: MS-Exchange Admin Issues
Subject: RE: Disconnecting MAPI Connections
I'm sure the list will correct me if I'm wrong but I believe that the
permission changes
Good to know, thx
From: Sobey, Richard A
To: MS-Exchange Admin Issues
Sent: Thu Nov 12 11:07:27 2009
Subject: RE: Disconnecting MAPI Connections
That would probably do the trick. Moving the mailbox will cause Outlook to lose
its connection, but bear in mind you ca
I'm sure the list will correct me if I'm wrong but I believe that the
permission changes don't stick immediately. How long are u waiting?
From: Rimmel, Carl [mailto:crimm...@hfhs.org]
Sent: 12 November 2009 17:54
To: MS-Exchange Admin Issues
Subject: Disconnecting MAPI Connections
We are running
That would probably do the trick. Moving the mailbox will cause Outlook to lose
its connection, but bear in mind you cannot move a disabled account ☺
From: bounce-8733747-8066...@lyris.sunbelt-software.com
[mailto:bounce-8733747-8066...@lyris.sunbelt-software.com] On Behalf Of John
Cook
Sent: 1
Disable the account and move it to another DB maybe?
From: Rimmel, Carl
To: MS-Exchange Admin Issues
Sent: Thu Nov 12 10:53:54 2009
Subject: Disconnecting MAPI Connections
We are running Exchange 2007, SP1. When we have a very sensitive user leave,
we would like
We are running Exchange 2007, SP1. When we have a very sensitive user leave,
we would like to have the ability to immediately disconnect and deny everyone
access to this mailbox. At the moment, we have not discovered a way to do this
when someone is currently connected to the mailbox.
Here is
http://technet.microsoft.com/en-us/scriptcenter/default.aspx
Best PS resource around. This and the rest of TechNet.
Tim
From: John Bowles [mailto:john.bow...@wlkmmas.org]
Sent: Thursday, November 12, 2009 8:15 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2010 RTM?
Tim-
What is this Scri
Tim-
What is this Script Center you speak of? :)
John Bowles
From: Tim Vander Kooi [tvanderk...@expl.com]
Sent: Wednesday, November 11, 2009 4:27 PM
To: MS-Exchange Admin Issues
Subject: RE: Exchange 2010 RTM?
I agree. We rarely do much outside the GUI with SMB
26 matches
Mail list logo
