| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW-1] SMTP Security Server Rejecting/Ignoring Mail
- To: [email protected]
- Subject: [FW-1] SMTP Security Server Rejecting/Ignoring Mail
- From: Dante Mercurio <[email protected]>
- Date: Mon, 5 Nov 2001 12:45:52 -0500
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcFl9eImBgR08EvfQiKVOBn5NCVPvgAK4nTg
- Thread-topic: [FW-1] Arp messages
Checkpoint 4.1 SP3 running on Windows 2000 SP2.
The issue is that the SMTP security server seems to ignore some incoming
email messages. According to my log, often an incoming SMTP packets are
denied by my cleanup rule. It seems it blows by my SMTP rule (16) and I
see an SMTP denied by rule 25 (clean-up). When this happens, the sender
eventually gets a non-deliverable message back. Also in the log, there
are packets denied by the SMTP rule that show nothing but a 'len' at the
end. Using a standard SMTP pass through, this never happens. The queue
is working fine, when the message gets to it. I've checked, and these
messages never get that far.
The SMTP security server has been configured to strip *.exe and *.vbs.
Also, it has been configured to accept non-RFC compliant addresses (when
email addresses are not sent in brackets<>). This problem was occuring
before either was put in place however, and were put in during the
troubleshooting process.
Any ideas would be appreciated.
M. Dante Mercurio, CCNA, MCSE+I, CCSA
Consulting Services Manager
Continental Consulting Group, LLC
www.ccgsecurity.com <http://www.ccgsecurity.com>
[email protected] <mailto:[email protected]>
> -----Original Message-----
> From: Symon Thurlow [mailto:[email protected]]
> Sent: Monday, November 05, 2001 8:43 AM
> To: [email protected]
> Subject: Re: [FW-1] Arp messages
>
>
> Check your subnet mask is correct.
>
> Symon
>
> -------------------
> > 4 of my machines are sending/receiving repeated arp
> > messages from strange ip addresses that do not belong
> > to my network.My network is of type 9.9.1.xx and the
> > strange adds are of type 9.9.yy.xx.This is depleting
> > my bandwidth performance.Could this be a security
> > issue?
> > Does anyone know what i should do?
> > Your urgent response will be appreciated.
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Find a job, post your resume.
> > http://careers.yahoo.com
> >
> > ===============================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > ===============================================
> >
> Cheers,
>
> Symon
>
> ===============================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ===============================================
>
===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================
|
|
