Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
One of our vendors has a SBRS that can change from 5 to none in under and hour. Is anybody else seeing this scenario? [img:391e825a91]http://web.acd.ccac.edu/~bpoyner/ironport/sbrs-fluctuate.jpg[/img:391e825a91]The DNS TTL on the graph is an indica...
I've made a perl script to automate the backup the SL/BL off our appliance. It "works for me" so I'm releasing the script because others might make good use of it. http://web.acd.ccac.edu/~bpoyner/ironport/backup-ironport-slblIt requires perl and ...
This is mostly a heads-up and a request for anybody that can replicate this problem. We've opened a support request with IronPort and they are looking into it. I'm hoping this might help a few people that have been banging their heads trying to fig...
We've received two "block removal" requests from Topica.com recently. Their SenderBase reputation score is a fairly low -3 for many of their "silver" SMTP servers, but some of their servers like the "gold" and "platinum" ones have neutral or good r...
Hi all,I thought I'd contribute a MRTG configuration that graphs the number of messages received per minute by an IronPort appliance, specifically threat v. clean messages. This uses the API for AsyncOS 5 and can be modified to get at other informat...
I'm now experimenting with a combination of https and ssh for grabbing the SL/BL.I've uploaded the updated script with SCP retrieval support at the same location as before. The SCP retrieval option requires public key authentication. The upshot her...
Thanks Steven.I'm now experimenting with a combination of https and ssh for grabbing the SL/BL. I wasn't too thrilled about using FTP but I didn't see an immediate way to determine the SL/BL filename chosen by the appliance. (Using a FireFox plugin ...
Obviously something is being lost in transport between the IronPort and the syslog server.The IronPort is using a standard remote syslog push, as would any *nix box.In this case, I would definitely recommend using traffic analysis, such as tcpdump. ...
What protocols are you talking about?just "plain" SMTP trafic, LDAP traffic, management traffic? of maybe a combination of those? Good question, as far as I know it only applies to any TCP traffic originating on the Windows 2008 server, passing throu...
then restart nagio, but always got the error:service nagios startStarting nagios:CONFIG ERROR! Start aborted. Check your Nagios configuration.Does anyone know what the problem is? There is a way to get nagios to tell you where the configuration probl...
