Email Security

I've been noticing a large number of messages with no message content. The full headers are intact, but there's nothing beyond them.This seems like an inefficient way of directory harvesting, if that's what's going on. Whatever the cause, it's rath...

Hi - are other people seeing two new types of spam which are currently evading Brightmail?The first is usually pushing stocks - it consists of a standard subject, a random haiku of words and a GIF image with a randomised filename. Despite getting hea...

We have a production C30 box that handles all of our Inbound/Outbound mail.We have also purchased a C10 that will eventually work in an Ironport cluster with the C30.However, I currently have the need to migrate the C30 from our existing DMZ to a ne...

I've been getting a lot of calls on these lately. Why isn't Brightmail catching this stuff?-S'ensationall revoolution in m'edicine!-E'n'l'a'r'g'e your p''enis up to 10 cm or up to 4 inches!-It's herbal solution what hasn't side effect, but has 100% g...

SANS is reporting a critical vulnerability in Sophos Anti-Virus products that can allow remote code execution. ( http://isc.incidents.org/diary.php?storyid=1325 ) Is the version that IronPort uses vulnerable?

In the message filters via the CLI (not the content filters via the GUI) I want to check to see if the attachment is ether called abc123.zip or 123abc.zip.If true then do the Anti-Virus check but skip the Anti-spam check.Something like:If (attachment...

Dear all: Who did configure ironport appliance DSR function? I want to know when I enable DSR/VIP so that can implement loadbalance about ironport appliance, I must need layer 4 switch, really? I can't find this requirement in ironport adva...

Hi, Any Ironport AS users out there who want to talk about how effective it is? Especially compared to Brightmail. Currently Brightmail has picked up a bit - however it is getting creamed by the "fully unique text graphical stock dumping scam" spams...

MIME encoding sucks :lol: A email with a 35meg .zip attachment comes in as 49.6megs (using the smtp logs) I've got a non-tech CTO that want to accept 50meg attachments. It seems to be working but sometimes the SOPHOS AV engine crapsout and the em...

I am running 4.5.6.The MFM numbers seem to be high (even though they are now a little less since my upgrade from 4.5.5 to 4.5.6).If I click on a domain listed in the detail of MFM I notice that the detail numbers are not the same as what is on the fi...

I wonder what kinda RBL server you are running on your IronPort box and how's the order list? sbl-xbl.spamhaus.orglist.dsbl.orgrelays.ordb.orgdul.dnsbl.sorbs.netetc... What do you recommendation of each RBL server?TIA.

I'm having a problem receiving messages on our Ironport from a M$ ISA Server cluster at another organization. When they try to send us messages and they leave a specific machine (x.x.169.233) it doesn't work. When the messages leave the other machi...

Hello,My MFC database is about 220 gig, keeping 45 days of data. It is running on a large system (Quad XEON Processor HP ML 570, with 6 Spindals for the data drive) and it still gets so busy it shuts down MySql.Support keeps telling me to index the ...

The MFC app does not offer many options for looking at the MF data. I want to try an create my own reports via Crystal.I downloaded and installed the MySQL ODBC driver. However, I do not know how it needs to be setup to access the MFC MySQL DB.Is ...

Anyone here able to create such a message filters to add custom "X-Authenticated-Sender" header on each successfull email using SMTP-Auth?I'd love to add this header, because it's usefull to trace who actually sent the message. or any better idea fo...