Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 23 replies
  • Subscribers 1 subscriber
  • Views 7998 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

My SMTP Rules are not being applied !!!

musab
Hello all,

I have setup my SMTP rules for example not to allow any message that contains "football" to be sent. But my mail client (Outlook express) is sending these messages ignoring my rule ! Any idea ?


This thread was automatically locked due to age.
Parents
  • 0
    Darren, I just tried it again.  Create an entry in the 'Expression list', [Apply], copy the expression into the subject and body of an email and send it to my email at yahoo.  Goes right through.  Here's an extract from my log: 
    2010:02:18-13:19:36 post exim[21558]: 2010-02-18 13:19:36 [10.x.y.7] F= R= Accepted: from relay

    2010:02:18-13:19:36 post exim[21558]: 2010-02-18 13:19:36 1NiBuS-0005bi-2l  balfson@otherdomain.com R=dnslookup T=remote_smtp H=d.mx.mail.otherdomain.com [209.x.y.z]:25

    2010:02:18-13:19:42 post exim[21564]: 2010-02-18 13:19:42 11e3Id-0005bi-2l Completed

    After receiving it at Yahoo, I replied back to my business address, and that email was indeed captured by Astaro because of the expression.

    Since you got an outbound email to stick in the quarantine, please show the lines from your SMTP log.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    2010:02:18-15:52:32 ***xx-1 exim[25044]: 2010-02-18 15:52:32 SMTP connection from [xx.xx.xx.xx]:63458 (TCP/IP connection count = 1)
    2010:02:18-15:52:32 ***xx-1 exim[7563]: 2010-02-18 15:52:32 [xx.xx.xx.xx] F= R= Accepted: from relay
    2010:02:18-15:52:32 ***xx-1 exim[7563]: 2010-02-18 15:52:32 1Ni8g4-0001xz-2r xx@yy.net H=xx@xx.org [xx.xx.xx.xx]:63458 P=esmtp S=1216 id=DC52F700-DDC5-439C-AC19-ED0F91C84868@***.net
    2010:02:18-15:52:32 ***xx-1 exim[7563]: 2010-02-18 15:52:32 SMTP connection from xx@xx.org [xx.xx.xx.xx]:63458 closed by QUIT
    2010:02:18-15:52:34 ***xx-1 smtpd[24974]: QMGR[24974]: 1Ni8g4-0001xz-2r moved to work queue
    2010:02:18-15:52:40 ***xx-1 smtpd[7571]: SCANNER[7571]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="xx.xx.xx.xx" from="xx@yy.net" to="***@***.com" subject="Test" queueid="11ic67-0001xz-2r" size="5"" reason="exp" extra="****"
    2010:02:18-15:53:00 ***xx-1 exim[7614]: 2010-02-18 15:53:00 Start queue run: pid=7614

    The address I sent this to was a yahoo.com account, however any outgoing emails containing expressions configured in the expressions list are captured by the mail manager.  extra="****" contained the banned expression.
Reply
  • 0 in reply to BAlfson
    2010:02:18-15:52:32 ***xx-1 exim[25044]: 2010-02-18 15:52:32 SMTP connection from [xx.xx.xx.xx]:63458 (TCP/IP connection count = 1)
    2010:02:18-15:52:32 ***xx-1 exim[7563]: 2010-02-18 15:52:32 [xx.xx.xx.xx] F= R= Accepted: from relay
    2010:02:18-15:52:32 ***xx-1 exim[7563]: 2010-02-18 15:52:32 1Ni8g4-0001xz-2r xx@yy.net H=xx@xx.org [xx.xx.xx.xx]:63458 P=esmtp S=1216 id=DC52F700-DDC5-439C-AC19-ED0F91C84868@***.net
    2010:02:18-15:52:32 ***xx-1 exim[7563]: 2010-02-18 15:52:32 SMTP connection from xx@xx.org [xx.xx.xx.xx]:63458 closed by QUIT
    2010:02:18-15:52:34 ***xx-1 smtpd[24974]: QMGR[24974]: 1Ni8g4-0001xz-2r moved to work queue
    2010:02:18-15:52:40 ***xx-1 smtpd[7571]: SCANNER[7571]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="xx.xx.xx.xx" from="xx@yy.net" to="***@***.com" subject="Test" queueid="11ic67-0001xz-2r" size="5"" reason="exp" extra="****"
    2010:02:18-15:53:00 ***xx-1 exim[7614]: 2010-02-18 15:53:00 Start queue run: pid=7614

    The address I sent this to was a yahoo.com account, however any outgoing emails containing expressions configured in the expressions list are captured by the mail manager.  extra="****" contained the banned expression.
Children
No Data
Cookie Information Banner