I have had a real problem lately with spammers picking up legitimate hosting accounts in the United States. The strange part is that when I pull a message history in Ironport, I am seeing it make different decisions on the same single connection.   In other words, the message history looks something like this with an incoming connection (all under the same one IP address) ... Message 1 - Dropped by CASE Message 2 - Dropped by CASE Message 3 - Dropped by CASE Message 4 - Delivered! Message 5 - Dropped by CASE Message 6 - Sent to SPAM quarantine Message 7 - Dropped by CASE Message 8 - Dropped by CASE Message 9 - Delivered!   My question is, why can't I drop a connection to Ironport the moment it's identified with CASE? It makes absolutely zero sense to let the sender keep pushing emails with slightly different sending addresses and subject lines until it's able to push a few through.   I have opened a ticket with support, but I am getting nowhere fast with them. They just want me to keep sending them more sample submissions. ... View more

Hello, I am attempting to achieve faster faxing, while also allowing credit card machines (modem based) to work using the same equipment and configuration. Fax passthrough, T.38, etc seems to break the credit card machines. Modem passthrough works for both. But by "works" I mean that I can never achieve a better speed than 14.4k on the faxes. Perhaps this is to be expected? I was reading that if I am using modem passthrough, an the bandwidth is there (it is), I should be able to see double that. Is anyone using the analog equipment and getting so called "high speed" faxing? Some config snippets ... On my VG204XM, running vg20xxm-advipservicesk9-mz.155-1.T2.bin voice service voip fax protocol none modem passthrough nse codec g711ulaw On my 2921, running c2900-universalk9-mz.SPA.152-4.M6a.bin voice service voip fax protocol none mgcp modem passthrough voip mode nse My equipment is attached to the VG204XM, which is being managed by CUCM 8.6.2. Not sure if any of that matters, since this device seems to ignore most of the call manager settings. I am attaching a snapshot of those settings anyway. The 2921 has a T1 line out to the telco (so it's a short trip for this traffic). I have all 1G connections in-between. I am also attaching a sample of the debug output. Thanks in advance for any advice!   ... View more

Cisco Prime Infrastructure is a damned nightmare of browser bugs (some features work in IE8, some in IE9, and some only in Firefox).  And I am not sure if what I am experiencing is a browser bug - or a real bug - or something that I was able to do before and can't any more?  I would love for someone to either explain why this is happening to me, or reproduce the bug! I'm running Prime 2.1.1.  I am doing this ... Configure > Controller Template Launchpad System > Dynamic Interface Select a command > Add interface (GO) Enter all the properties - roll to the bottom of the page, and click Apply to Controllers I have four controllers.  And normally I would add an interface for each controller.  But I can only create two out of the four.  It doesn't matter which two I choose.  When I click Add under Manage Interfaces for the third controller, I cannot click the Done button to apply it (see screenshot, attached).  I have found that if I change the VLAN to something else, it will let me save it.  But ... why?  I went back and reviewed all of my existing interface templates and I am not doing anything different.  Although, they were all created a long while ago using WCS 7.x. Any help, guidance, or confirmation of insanity would be appreciated. -Steve Ballantyne ... View more

I have an ASA 5520 with an ASA-SSM-10 module in it for IDS.  It has (from what I can tell) never been used or configured.  In fact, I only recently found that it existed!  I would like to begin using it, starting with replacing the software image with the latest (I do NOT need any configuration from it now). Details ... KCH-ASA-Primary# sh module 1 details Getting details from the Service Module, please wait... ASA 5500 Series Security Services Module-10 Model:              ASA-SSM-10 Hardware version:   1.0 Serial Number:      JAF10422581 Firmware version:   1.0(11)2 Software version:   6.0(1)E1 MAC Address Range:  0018.b91b.69f1 to 0018.b91b.69f1 App. name:          IPS App. Status:        Up App. Status Desc: App. version:       6.0(1)E1 Data plane Status:  Up Status:             Up Mgmt IP addr:       172.17.1.20 Mgmt web ports:     443 Mgmt TLS enabled:   true   The problem that I am having is that when I set it up to pull down the new software through TFTP, it just hangs and times out. KCH-ASA-Primary# hw module 1 recover config Image URL [tftp://10.10.10.9/IPS-sig-S789-req-E4.pkg]: Port IP Address [172.17.1.20]: VLAN ID [950]: Gateway IP Address [172.17.1.1]: KCH-ASA-Primary# And then ... KCH-ASA-Primary# debug module-boot debug module-boot  enabled at level 1 KCH-ASA-Primary# hw module 1 recover boot The module in slot 1 will be recovered.  This may erase all configuration and all data on that device and attempt to download a new image for it. Recover module in slot 1? [confirm] Recover issued for module in slot 1 KCH-ASA-Primary# Slot-1 215> Cisco Systems ROMMON Version (1.0(11)2) #0: Thu Jan                             26 10:43:08 PST 2006 Slot-1 216> Platform ASA-SSM-10 Slot-1 217> GigabitEthernet0/0 Slot-1 218> Link is UP Slot-1 219> MAC Address: 0018.b91b.69f1 Slot-1 220> ROMMON Variable Settings: Slot-1 221>   ADDRESS=172.17.1.20 Slot-1 222>   SERVER=10.10.10.9 Slot-1 223>   GATEWAY=172.17.1.1 Slot-1 224>   PORT=GigabitEthernet0/0 Slot-1 225>   VLAN=950 Slot-1 226>   IMAGE=IPS-sig-S789-req-E4.pkg Slot-1 227>   CONFIG= Slot-1 228>   LINKTIMEOUT=20 Slot-1 229>   PKTTIMEOUT=4 Slot-1 230>   RETRY=20 Slot-1 231> tftp IPS-sig-S789-req-E4.pkg@10.10.10.9 via 172.17.1.1 KCH-ASA-Primary# Slot-1 232> TFTP failure: Packet verify failed after 20 retries Slot-1 233> Rebooting due to Autoboot error ... Slot-1 234> Rebooting.... I know that I can reach 10.10.10.9 from 172.17.1.x.  And this is the present port IP of the device.  If I do a 'session1' and ping 10.10.10.9, I get replies.  I know my TFTP is working ... I use it for all of my switches for config backups and installing new IOS.  And watching my TFTP server window, I am not seeing any connection attempts. What am I doing wrong here?  :-(   ... View more

I believe that I have had this problem in the past, but I can't remember what I did to fix it. I have a user that while playing a voice mail message, will get disconnected.  As in, Unity just hangs up on them.  It doesn't seem to be related to any particular one message, or the length of time that the user is on the call.  As of now, this is only a single user reporting the problem.  I have a feeling just waiting and doing nothing may resolve it, as there are cleanup and repair jobs that run at 1:00AM.  But I thought it might be nice to see if anyone else has experienced this and what they did about it. I am running Cisco Unity 8.6.2. ... View more

A few weeks ago, I started getting complaints of IP address conflicts on my network with my Windows 7 hosts.  When I went into the event logs I found that the conflict was with 0.0.0.0 and it sometimes listed the MAC address of the switch interface.  It seems that this is a known issue, and Cisco is blaming Windows for gratuitous ARP requests.  Why did this start just weeks or months ago out of the blue?  The article that I was reading about this problem was from October 2013, but they note that this happened with Vista too.  Was there a recent Windows update that caused this change in behavior? I have tried to follow the suggestions in this article: http://www.cisco.com/image/gif/paws/116529/116529-problemsolution-product-00.pdf But I can't perform the most common fixes, such as setting a delay using "ip device tracking probe delay" or "ip device tracking probe use−svi" which seems like the most logical fix.  It seems that I am being punished because I have a 6513 or a 6500 series switch.  These commands are not available to me ... and at the rate we are going, probably never will be. I have also performed the workaround with my Windows machines to kill the gratuitous ARP.  That has resolved 90 percent of the conflicts I was seeing, but not all of them. Has anyone else found a good fix or workaround for this problem involving 6500 series switches? ... View more

Hello all, Has anyone had trouble with their Cisco ATA-187 devices on the latest firmware (9.2.3)?  I have about five of these in the field, and since I updated to the lastest available firmware I have had a problem with the devices sporadically going into a fast busy and failing to make calls.  I can access the device via the web access, and it remains registered to call manager.  But I am unable to reboot or restart the device through call manager (it ignores the request).  I have to drive to the location and manually power off and power on the device.  It's becoming a real pain. Prior to this I was running 9.2.1 on them and I didn't have these problems, so I am considering reverting back.  Just wondering if anyone else out there is experiencing this. Thanks, -Steve Ballantyne ... View more