Folks,1) smtpauth with ldap should be binding rather than retrieving password. Since userPassword is a multi-values attribute (SunDS), when grabbing the password to check, the DS returns the newest one first and auth fails. We have multiple passwor...
So, I thought I'd try out a poll, and see what features people would like to see in the IronPort C-Series applicances...Not sure how the poll functions works, and if other people can add options, I guess we'll see.For me, I *definitely* want to see c...
I'm curious what types of policies the IronPort Nation has set up based on the SenderBase Reputation Score (SBRS)With the release of AsyncOS 4.0, we changed the recommended score to block connections to -4 (from -7), but I've seen all types of polici...
This is our current sender group order. Does it make sense?Internal machines that are allowed to relay through IronPort WHITELIST: TRUSTED Trusted senders have no Brightmail or rate limiting ManualBlock: BLOCKED manual blocks, and really b...
I grew tired of getting complaints from upper management whenever our mail server's performance degraded. In every case, I could trace the problem to one or more messages containing huge attachments (>10MB), and they almost never were business-relate...
You need top do this in the policy configuration (policyconfig --> Incoming or Outgoing--> filters) or you can do it in the GUI (Mail Policies --> Incoming/Outgoing Content Filters) since the X-IronPort-AV doesn't get added until the virus checker r...
We have recently gotten a lot of complaints from users who say that we are blocking their attachments even though it is not on the list of attachments we say that we block. After a little investigation we found that these users had installed an Outl...
This section is to share real-world stories about how folks have configured their IronPorts. What really works (or doesn't) out there in the IronPort Nation?
Mark, sorry should have given you this list months ago. My guess is you've already thought of all of these and more.Everyone else, feel free to add to the list or tell me I'm nuts... or better yet ask what for.1) A good DHAP (directory harvest attac...
About six months ago, we received word that one of our business partners was not receiving email from us. The business partner was running a MS Small Business Server 2003 behind a SonicWall TZ 170 firewall connecting to their ISP through PPPoE. I set...
