Prev: SBS 2008 Backup-Fails with Creation of the shared protection point
Next: CTIW Fails When Looking for Router
From: Ace Fekay [MCT] on 1 Dec 2009 14:27
"Dave" <Dave(a)discussions.microsoft.com> wrote in message
news:29C35AC9-42CE-42C6-A2DB-72FA558B6F9A(a)microsoft.com...
> don't use the web interface?
> I don't have outlook express or xp pro
>
> --
> Dave

Outlook Express is built in to XP or older. Vista and 7 have Windows Mail,
which is a News reader, too. It's a lot easier for you with numerous
benefits over the web based interface. If you are using Mac or any other
operating system, there are numerous *free* newsreaders available for
downloading and installing.

Ace




From: Ace Fekay [MCT] on 1 Dec 2009 14:30
"Dave" <Dave(a)discussions.microsoft.com> wrote in message
news:F2588524-9692-4FB3-A478-28256D43E9A5(a)microsoft.com...
> It is coming from the vendor's email server
> I don't know if they have an SPF record, don't know what that is
> we use trend micro for anti-spam, and it's not blocking that email address
> or domain,
> we receive emails from our vendors domain all the time. if they send the
> report to my hotmail or comcast account I get it.
>
> --
> Dave

It might be coming "From" the vendor, may not be coming from a different IP
address than the vendor's email server, so Trend and/or IMF may be looking
at it as a spoofed address.

Is there anyway to look at your Trend logs to determine any blocked emails,
or do you have it setup to simply reject and delete it completely and not
log rejections? At this time, that appears the only way to figure this out.
If you cannot see the logs, or not logging this stuff, it will be very
difficult to figure out.

Ace



From: Ace Fekay [MCT] on 1 Dec 2009 14:32
"Dave" <Dave(a)discussions.microsoft.com> wrote in message
news:0CDEEC5A-DF97-4BE9-A08D-E2B33769C20D(a)microsoft.com...
>> >
>> > didn't understand the article
>> >
>>
>> Dave,
>>
>> Which article?
>>
>> Ace

> the article Robbin Meng had a link to
> --
> Dave
>

Robbin posted a couple of articles. Which article, and wihch part of the
article didn't you understand?

Ace






From: Ace Fekay [MCT] on 1 Dec 2009 14:35
"Dave" <Dave(a)discussions.microsoft.com> wrote in message
news:53EA2DBE-3C09-4200-A554-6CC7790E6450(a)microsoft.com...
> how do I find SPF
> so I need to enable SenderID filtering? where do I find that at
>
> --
> Dave
>

The SPF is a text file. To find if a domain has an SPF record, use nslookup:

nslookup
> set q=txt
> vendordomain.com

If a long string of characters show up with IP addresses, that is the SPF.
Check the IP addresses listed against the IP address of the report that is
supposedly coming from the vendor. If there is no match, then either IMF
and/or trend is rejecting it.

I would change it from reject to allow through but tag it as Spam. However,
I do not know how Trend works or what it does with tagged Spam. The IMF will
send it to a user's Junk Email folder, wihch is nice so you can see what is
being tagged. However, if Trend is rejecting it, and you are not logging
rejections, there is no way to figure it out.

Ace


From: Dave on 1 Dec 2009 16:47
I followed the new weapons in flight link
and it's working now

--
Dave


""Robbin Meng [MSFT]"" wrote:

>
> Hi Dave,
>
> Thanks for you update.
>
> Based on the current situation, if you can receive regular emails from the vendor mail server except the automatically sent report mail, then I agree with Larry and Ace that it is
> probably caused by your Exchange server that may be the IMF or other 3rd party spam filter block/reject the report email that from an automatic sent email address(which might
> not exist and no mailbox at all) of the vendor mail system.
>
> Basically, to verify a legitimate sender, your Exchange server checks for the sending domain's SPF (Sender Policy Framework) record, which is published in the DNS record.
> The mail server then determines whether the sending e-mail server's IP address matches the IP address that is published in the DNS record. SenderID and SPF are not equal,
> but enabling SenderID filtering will make your Exchange check sender's SPF records.
>
> New Weapons In The Fight Against Spam
> http://207.46.16.252/en-us/magazine/2006.01.newweapons.aspx
>
>
> More information about IMF:
>
> Microsoft Exchange Server Intelligent Message Filter v2 Operations Guide
> http://technet.microsoft.com/en-us/library/aa996624(EXCHG.65).aspx
>
> Hope this helps.
>
>
>
>
> Best regards,
> Robbin Meng(MSFT)
> Microsoft Online Newsgroup Support
>
>
> .
>
First  |  Prev  |  Next  |  Last
Pages: 1 2 3 4 5
Prev: SBS 2008 Backup-Fails with Creation of the shared protection point
Next: CTIW Fails When Looking for Router