Thread Info
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Please advise how to block spam messages while using imaps and how to get smtp into the logviewer?

rfcat_vk

Hi folks,

a while ago I had issues with SASI not logging all iMaps traffic. The issue has been partially resolved by changing firewall mail rules.

A new issue is I receive over 1000 spam messages a day from the same sites via the mail post office address. I can't block the IP address because it is a valid mail server address fro genuine messages.

The question is, how do I use the XG to block the unwanted traffic? Further I will be following up with the mail service as to why their spam engine reports the messages as not spam.

Next item, how to get user sent messages using SMTP into the logs and be reported daily? The XG sent daily reports show in the daily reports.

Ian



This thread was automatically locked due to age.
  • 0

    over 12000 spam messages yesterday and not one identified as spam.

    Ian

    XGS118 - v21.5.0

    XG115 converted to software licence v21.5.0

    If a post solves your question please use the 'Verify Answer' button.

    • 0 in reply to rfcat_vk

      Hi Ian,

      we'd like to examine some of those messages.

      Can you please export some including their mail headers and send them in a PM to me?

      Thank you,

      Janos

      • 0 in reply to JanosRapcsak

        Hi,

        I have PM'ed you asking for a progress report and not received any advice regarding the Imaps traffic you were investigating and I have not received any advice on the SMTP issue.

        Ian

        XGS118 - v21.5.0

        XG115 converted to software licence v21.5.0

        If a post solves your question please use the 'Verify Answer' button.

        • 0 in reply to rfcat_vk

          Could part of the answer be that SASI does not work on IPv6 traffic?

          Ian

          XGS118 - v21.5.0

          XG115 converted to software licence v21.5.0

          If a post solves your question please use the 'Verify Answer' button.

          • 0 in reply to rfcat_vk

            Hi foks,

            further investigation  and questions. I note that in both IP4 and IPv6 mail messages the XG translate the 993 to 992, could this be the reason why SASI is not scanning messages? I have highlighted the DST port in red.

            mail proxy.docx

            Ian

            XGS118 - v21.5.0

            XG115 converted to software licence v21.5.0

            If a post solves your question please use the 'Verify Answer' button.

            • 0 in reply to rfcat_vk

              No-one else has this issue? Hopefully the issues will be resolved with v20.0.1 mr-1?

              Ian

              XGS118 - v21.5.0

              XG115 converted to software licence v21.5.0

              If a post solves your question please use the 'Verify Answer' button.