i got a strange thing going on..
Since last weekend, we changed our e-mail traffic..
We are now working with Exchange 2010 and Astaro UTM 120.
We receive incoming mail via Popcon (Pop3) and send it to the Astraro.
After the Spam/Antivirus check, the mails will be forwarded to the exchange server.
Sometimes we get the email without the attachment, in this case it is an encrypted message with a zip file with a passwort, but happend today also with a non encrypted message with a *.doc-file
For the sender adress i made an exception rule on everything for Spam/Antivirus.
But it doesnt effect anything..
When i connect from my outlook to a pop3 account through the firewall, i get the same mail without attachments...
Mime-Filter disabled/files endings no *.zip or *.doc ...
BATV/SPF enabled
I am not sure who makes the trouble (Astaro or Exchange)
I change the entry cause of inline attachments in the Exchange, but it didnt work out You cannot use an Outlook 2010 client or an Outlook 2007 client to display or download an attachment when you access a message that includes an inline attachment from Microsoft Exchange Server
Hopefully you can detect something in the log, and help me find out who makes the trouble...
Thanks in advance ..
SMTP connection from [x.x.x.x]:42788 (TCP/IP connection count = 1)
2013:06:21-11:16:57 gate-1 exim-in[32028]: 2013-06-21 11:16:57 H=(exchange-pop3-connector.com) [x.x.x.x]:42788 Warning: Exception matched: Skipping greylisting for this message
2013:06:21-11:16:57 gate-1 exim-in[32028]: 2013-06-21 11:16:57 H=(exchange-pop3-connector.com) [x.x.x.x]:42788 Warning: Exception matched: Skipping AV for this message
2013:06:21-11:16:57 gate-1 exim-in[32028]: 2013-06-21 11:16:57 H=(exchange-pop3-connector.com) [x.x.x.x]:42788 Warning: Exception matched: Skipping antispam for this message
2013:06:21-11:16:57 gate-1 exim-in[32028]: 2013-06-21 11:16:57 H=(exchange-pop3-connector.com) [x.x.x.x]:42788 Warning: mail profile excludes greylisting: Skipping greylisting for this message
2013:06:21-11:16:57 gate-1 exim-in[32028]: 2013-06-21 11:16:57 [x.x.x.x] F= R= Accepted: from relay
2013:06:21-11:16:57 gate-1 exim-in[32028]: 2013-06-21 11:16:57 H=(exchange-pop3-connector.com) [x.x.x.x]:42788 Warning: mail profile excludes greylisting: Skipping greylisting for this message
2013:06:21-11:16:57 gate-1 exim-in[32028]: 2013-06-21 11:16:57 [x.x.x.x] F= R= Accepted: from relay
2013:06:21-11:16:58 gate-1 exim-in[32028]: 2013-06-21 11:16:58 1UpxSj-0008Ka-2n sender@mail.com H=(exchange-pop3-connector.com) [x.x.x.x]:42788 P=smtp S=3661 id=C4924D6EE67E0A46830D73CAC94CD9394AA4A7@EX-FRA-01.***x.net
2013:06:21-11:16:58 gate-1 exim-in[32028]: 2013-06-21 11:16:58 H=(exchange-pop3-connector.com) [x.x.x.x]:42788 Warning: lasttrans.de profile excludes greylisting: Skipping greylisting for this message
2013:06:21-11:17:00 gate-1 smtpd[32030]: SCANNER[32030]: 1UpxSm-0008Kc-Go sender@mail.com R=1UpxSj-0008Ka-2n P=INPUT S=2048
2013:06:21-11:17:00 gate-1 smtpd[32030]: SCANNER[32030]: 1UpxSm-0008Kc-Gv sender@mail.com R=1UpxSj-0008Ka-2n P=INPUT S=2048
2013:06:21-11:17:00 gate-1 smtpd[32030]: SCANNER[32030]: id="1000" severity="info" sys="SecureMail" sub="smtp" name="email passed" srcip="x.x.x.x" from="sender@mail.com" to="user2@domain.com" subject="[WARNING : MESSAGE ENCRYPTED]
[WARNING : MESSAGE ENCRYPTED] Betreff" queueid="1UpxSm-0008Kc-Gv" size="2048"
2013:06:21-11:17:00 gate-1 smtpd[32030]: SCANNER[32030]: id="1000" severity="info" sys="SecureMail" sub="smtp" name="email passed" srcip="x.x.x.x" from="sender@mail.com" to="user1@domain.com" subject="[WARNING : MESSAGE ENCRYPTED]
[WARNING : MESSAGE ENCRYPTED] Betreff" queueid="1UpxSm-0008Kc-Go" size="2048"
2013:06:21-11:17:00 gate-1 smtpd[32030]: SCANNER[32030]: 1UpxSj-0008Ka-2n => work R=SCANNER T=SCANNER
2013:06:21-11:17:00 gate-1 smtpd[32030]: SCANNER[32030]: 1UpxSj-0008Ka-2n Completed
2013:06:21-11:17:00 gate-1 smtpd[8101]: QMGR[8101]: 1UpxSk-0008Ka-32 moved to work queue
2013:06:21-11:17:01 gate-1 exim-out[32032]: 2013-06-21 11:17:01 1UpxSm-0008Kc-Gv => user2@domain.com P= R=static_route_hostlist T=static_smtp H=x.x.x.x [x.x.x.x]:25 X=TLSv1:AES128-SHA:128 C="250 2.6.0
[InternalId=1557] Queued ma"
2013:06:21-11:17:01 gate-1 exim-out[32032]: 2013-06-21 11:17:01 1UpxSm-0008Kc-Gv Completed
2013:06:21-11:17:01 gate-1 exim-out[32033]: 2013-06-21 11:17:01 1UpxSm-0008Kc-Go => user1@domain.com P= R=static_route_hostlist T=static_smtp H=x.x.x.x [x.x.x.x]:25 X=TLSv1:AES128-SHA:128 C="250 2.6.0
[InternalId=1558] Queued ma"
2013:06:21-11:17:01 gate-1 exim-out[32033]: 2013-06-21 11:17:01 1UpxSm-0008Kc-Go Completed
This thread was automatically locked due to age.
