Ironport alt-mailhost filter and bounced emails.

Hello!
I have problem with ironport configuration and hope someone help me )
I use filter with alt-mailhost rule for users within domain but located on another server.
It's work fine. But... i have problem with bounced emails. They don't affected by filter and use smtp route.
How to attach my filter with bounced emails?
Thanks for any help.

Hello,
bounce email messages are handled outside the work queue so they are not subject to Message Filter or Content Filter processing. Only SMTP routes will apply here, an alt-mailhost action is not possible.
The only possible workaround would be to loop the delivered bounce message over the appliance again (e.g an SMTP route that points to a secondary listener on the appliance), so that it can be reprocessed by alt-mailhost. Please note that looping certain messages over the appliance again bears the risk of an endless mail loop so you may need to adjust your filters accordingly to prevent this.
Hope this helps. If not, please let us know.
Regards,
Martin

Similar Messages

Junk mail filter and feedback email address

What's the feedback email address because I want to suggest Apple adds a spam filter to the phone already. Can you believe they don't have one.

i dont get why you're putting the owness on apple? thats to be done on whoever is providing you with the email. is it your tv's fault that theres so many commercials when you watch a program?
with that said, use gmail. its does a GREAT job filtering stuff i dont want.

How to convince Externals IronPort is safe to send confidental emails?

Please can some one in Cisco help me
I need to put together a nice docuement peferable with nice graphics if available to explain that Cisco IronPort is a secure means of sending email data and that Iron port uses industry standard high levels of encyption and just how secure that is.
This will mean basicly that any one that needs to send a confidental email to me, will be able to evaluate how strong IRONPORT is and know they are following good practise and remaining correct to their data policys for transit.
Please can I have some good links or some aleady detailed documention that explains the security of IronPort send secure?

If data management and persons wishing to be secure regarding the way they send data to their customers or vendors and currently rely on simple password protected files.
What is more secure? a word docuement intercepted with a five chracter all lower case password or a non password protected word docuement but sent over Ironport Encryption Appliance?
If a word file with a simple password is intercepted in transit, it would be security risk compared to this same file being sent with no password and over cisco's ironport solution.
Where is this information.
How many bits is secure mail, it is HTTPS but that in conjunction with Ironport is how secure.
How can customers know they can rely on Ironport to both send and receive emails via “Ironport Encryption Appliance”.
Please can some one dirrect me in the correct dirrection ?

TS3899 My iPhone & iPad mail is locked - Press mail app, the screen starts mail, freezes and bounces back to main menu. The fault occurred whilst opening a draft email created in the 'Mail 2 Group' app. Hard reset/reset all/restore backup have no effect -

I installed the Mail 2 Group App on my iPAD, created an email which I saved to the 'Draft' folder, with something over 300 of my contacts in the bcc. On returning to this email, again in my iPad, the screen locked in mail for a few seconds and bounced bak to the main menu. This repeated on my iPhone, on which I have been carrying out my own checks - this includes deleting the Yahoo account, hard reset (red cross and two buttons), restoring a backup and Reset All in settings.
I'm stuck !!

Sending a message with that many addressees may have required more RAM than was available. You can clean up RAM as follows:
Double-press the HOME button
Kill each app by flicking its screen image up
When all apps except the Home screen are closed press HOME
Wait about 2 minutes for the shutdowns to finish
Turn the phone off (hold the SLEEP button until "slide to power off" appears, and do so)
Wait another minute
Turn the phone back on by holding the SLEEP button until an Apple logo appears
Now try to send the mail again. Note that you may have an unrelated problem if this works: Many ISPs (Yahoo included) limit the number of email recipients for a single message as a way to combat spam.

Alt-Mailhost Query

Hi, I need to re-route inbound messages from a certain domain to an alternative internal IP address. Looks easy enough to do with the alt-mailhost action, but there’s a line in the IronPort help file that confuses the issue slightly:
“Note that any additional routing information specified by the smtproutes command still affects the routing of the message”
I have 2 static inbound SMTP routes defined for our domain – what I need to do is override this for one specific sender domain. Will alt-mailhost do this or will it be overridden by the SMTP routing table?
Any advice appreciated.

The "smtproutes" will get the last say in routing.
With alt-maillhost(), you may want to try and send it directly to the internal IP address.
From our Advance User Guide:
Alter Delivery Host Action
The alt-mailhost action changes the IP address for all recipients of the selected message to the numeric IP address or hostname given. The following example filter redirects recipient addresses to the host example.com for all messages.
localRedirectFilter:
if(true)
alt-mailhost('example.com');
Thus, a message directed to [email protected] is delivered to the mailhost at example.com with the Envelope To address [email protected] Note that any additional routing information specified by the smtproutes command still affects the routing of the message. (See “Routing Email for Local Domains” on page 38.)
local2Filter:
if(true)
alt-mailhost('192.168.12.5');
Hi, I need to re-route inbound messages from a certain domain to an alternative internal IP address. Looks easy enough to do with the alt-mailhost action, but there’s a line in the IronPort help file that confuses the issue slightly:
“Note that any additional routing information specified by the smtproutes command still affects the routing of the message”
I have 2 static inbound SMTP routes defined for our domain – what I need to do is override this for one specific sender domain. Will alt-mailhost do this or will it be overridden by the SMTP routing table?
Any advice appreciated.

Alt-Mailhost / SMTP Routes Question...

Hi All,
I have a query on SMTP routing when using the Alt-Mailhost command in a Message Filter...
Our configuration in overview is two Ironport devices (C650's at AsyncOS 6.4) at separate sites, configured as a cluster (all config is common across sites). At each site, there also exists a 3rd party mail host.
So, I have a message filter which selects messages based on some criteria and I also know which Ironport received it. When I have a match, I want to route this message to the 3rd party mail host on the _local_ site......but if that mail host is down, I want to route it to the 3rd party mail host on the other site. Simple as that!
At the moment, my Alt-Mailhost command looks like this;
<message has been selected> {
<if "Site A" Ironport used> {
alt-mailhost('bogusdomain1.net');
<else>{
alt-mailhost('bogusdomain2.net');
...in my SMTP Routes I'd _like_ to have this;
bogusdomain1.net     <3rd-Party-Box-at-Site-A>, <3rd-Party-Box-at-Site-B>
bogusdomain2.net     <3rd-Party-Box-at-Site-B>, <3rd-Party-Box-at-Site-A>
...but this doesn't work because multiple hosts in an SMTP route are tried in numerical / alphabetical order...no matter what order you put them into the SMTP Route definition (is this a bug?)....so in reality, they both have to look like this;
bogusdomain1.net     <3rd-Party-Box-at-Site-A>, <3rd-Party-Box-at-Site-B>
bogusdomain2.net     <3rd-Party-Box-at-Site-A>, <3rd-Party-Box-at-Site-B>
..which is no use.
My only other idea is that I could just have this in the SMTP Routes for those domains;
bogusdomain1.net     USEDNS
bogusdomain2.net     USEDNS
...and configure my DNS with the above domains, such that there really _is_ a difference in the order of the MX for those domains.
So my question is, how can I do this without using 'USEDNS' and the associated DNS config...i.e. just via the Ironport devices?
Hope the collective can help!
Cheers, Chris.

Check out the latest release notes...
Enhanced: Prioritized SMTP Routes
AsyncOS 7.0 allows you to prioritize the destination hosts for your SMTP routes. AsyncOS will attempt to deliver the message to a destination host in order based on priority. Destinations with identical priority will be used in a “round-robin” fashion.

DKIM and bounce verification

Hi all, as I understand DKIM uses from: field to create the hash that later will be used for recipient. Bounce Verification inserts a tag inside from: field too. So I supposed Ironport first insert the Bounce Verification tag and then create DKIM hash, because if you create DKIM first then Bounce Verification modifies the message and the hash will not be valid.
Is this correct?
thank you
Regards
Samuel

Greetings,
BV does not modify the FROM header, only modify field. So it doesn't impact DKIM signing. The DKIM signature is inserted in the email as a DKIM signature header and the email is transmitted. The receiving MTA extracts the DKIM signature from the header and the claimed sending domain (via the Sender: or From: header) from the email. The public key is retrieved from the claimed signing domain which is extracted from DomainKeys or DKIM signature header fields.
Hope answered your question.
Cheers,
Viquar Ahmed
Customer Support Engineer

Confusing about Message filter and Content filter

I have a message filter do quarantine action:
badbody: if body-dictionary-match("badbody", 1) {
quarantine ("Policy");
deliver();
also I write a content filter 'good' to see what spams are missed by Ironport Antispam:
Conditions (only if all conditions match):
header("X-IronPort-Quarantine") != "^Policy$"
header("X-Spam-flag") != "^(?i)YES$"
Action:
duplicate-quarantine ("good")
deliver()
I think these two rules could not occur both, because the filter badbody had sent the spam to quarantine 'Policy',
there's no possible to dumplicate to qurantine 'good'.
But it happens:
Tue Jun 17 18:52:55 2008 Info: New SMTP ICID 26146919 interface InNet (10.68.2.161) address 61.135.132.136 reverse dns host websmtp.sohu.com verified no
Tue Jun 17 18:52:55 2008 Info: ICID 26146919 ACCEPT SG ICP match .sohu.com SBRS 5.5
Tue Jun 17 18:52:55 2008 Info: Start MID 10698519 ICID 26146919
Tue Jun 17 18:52:55 2008 Info: MID 10698519 ICID 26146919 From: <mia_kma3998>
Tue Jun 17 18:52:55 2008 Info: MID 10698519 ICID 26146919 RID 0 To: <swordhuihui>
Tue Jun 17 18:52:55 2008 Info: MID 10698519 Message-ID '<10849536>'
Tue Jun 17 18:52:55 2008 Info: MID 10698519 Subject '=?GB2312?B?1Pa807z7zsU=?='
Tue Jun 17 18:52:55 2008 Info: MID 10698519 ready 1452582 bytes from <mia_kma3998>
Tue Jun 17 18:52:56 2008 Info: MID 10698519 matched all recipients for per-recipient policy DEFAULT in the inbound table
Tue Jun 17 18:52:56 2008 Info: MID 10698519 was too big (1452582/102400) for scanning by CASE
Tue Jun 17 18:52:56 2008 Info: Start MID 10698528 ICID 0
Tue Jun 17 18:52:56 2008 Info: MID 10698528 was generated based on MID 10698519 by duplicate-quarantine filter 'good'
Tue Jun 17 18:52:56 2008 Info: MID 10698528 ICID 0 From: <mia_kma3998>
Tue Jun 17 18:52:56 2008 Info: MID 10698528 ICID 0 RID 0 To: <swordhuihui>
Tue Jun 17 18:52:56 2008 Info: MID 10698528 ready 1452584 bytes from <mia_kma3998>
Tue Jun 17 18:52:56 2008 Info: MID 10698528 quarantined to "good" (duplicated by content filter:good)
Tue Jun 17 18:52:56 2008 Info: MID 10698519 quarantined to "Policy" (message filter:flg1)
Tue Jun 17 18:52:59 2008 Info: ICID 26146919 close
The log shows the quarantine action of message filter take effect after the content filter action. I'm quite confused.
Any suggestion?

The original message was marked to go to the "Policy" system quarantine via the message filter. However, that message continues through the email pipeline. If no other action affects that message(i.e. dropped by Sophos anti-virus), then the system will move the message to the "Policy" quarantine as originally marked.
However, in your case, the message was marked to be sent to the "Policy" system quarantine, and then it matched your content filter and did two things:
1. spawned a copy of the original message and sent this new one to the "good" system quarantine. (see MID 10698528)
2. the original copy was left alone and this one was sent to the "Policy" quarantine. If you had a drop() action, then it would have gotten dropped and you would have been left with the single copy from #1 (see MID 10698519)
What was the intended behavior you were trying to achieve?
Here are some references that may help:
1. Where can I see a diagram of the IronPort email pipeline?
You can find a diagram of the queue sequence if you click on the Help
link in the top right of the web interface - it takes a while for it to
load. Find the section "Understanding the Email Pipeline" and then
under that "Overview: Email Pipeline".

Schedule webi report to destination to Inbox AND send email notification

I'm writing a new process that will schedule a webi report. The output of the report needs to be delivered to multiple user's BO Inboxes AND an email notification (without the report attached) needs to be sent telling them that they have a new report to view in their Inbox. Trying to mimic how this is done via CMC Schedule - Notification and Destination tabs.
I can get it to deliver the report to the Inbox and I can get it to send an email seperately, but the problem I'm running into is that I can't get it to do both in the same process. Here is the code snippet that I've written. Any assistance would be appreciated.
// Retrieve the managed plugin
IInfoObjects managedInfoObjects = infoStore.query("Select SI_DEST_SCHEDULEOPTIONS, SI_PROGID From CI_SYSTEMOBJECTS Where SI_NAME = 'CrystalEnterprise.Managed'");
IInfoObject infoObject = (IInfoObject)managedInfoObjects.get(0);
IDestinationPlugin destinationPlugin = (IDestinationPlugin)infoObject;
IManaged managed = (IManaged)destinationPlugin;
// Set the destination to inbox
IManagedOptions managedOptions = (IManagedOptions)managed.getScheduleOptions();
managedOptions.setDestinationOption(IManagedOptions.CeDestinationOption.ceInbox);
managedOptions.setSendOption(IManagedOptions.CeManagedSendOption.ceCopy);
managedOptions.setIncludeInstance(true);
managedOptions.getDestinations().add(new Integer(ditUserID1));
managedOptions.getDestinations().add(new Integer(ditUserID2));
managedOptions.getDestinations().add(new Integer(ditUserID3));
scheduleInfo.getDestination().setFromPlugin(managed);
// Retrieve the smtp plugin. to send email notification
IInfoObjects smtpInfoObjects = infoStore.query("Select SI_DEST_SCHEDULEOPTIONS, SI_PROGID From CI_SYSTEMOBJECTS Where SI_PARENTID = 29 AND SI_NAME = 'CrystalEnterprise.Smtp'");
IInfoObject smtpInfoObject = (IInfoObject)smtpInfoObjects.get(0);
IDestinationPlugin smtpDestinationPlugin = (IDestinationPlugin)smtpInfoObject;
// Set to email notification on success
ISMTP smtp = (ISMTP)smtpDestinationPlugin;
ISMTPOptions smtpOptions = (ISMTPOptions)smtp.getScheduleOptions();
smtpOptions.setServerName("mailhost.XXXXX.net");
smtpOptions.setPort(25);
smtpOptions.setDomainName("XXXXX.com");
smtpOptions.setSenderAddress("XXXXX.com");
smtpOptions.setSubject("Indicative Data Update Reports");
smtpOptions.getToAddresses().add("XXXXX.com");
smtpOptions.setMessage("Test Message");
smtpOptions.setSMTPAuthenticationType(CeSMTPAuthentication.NONE);
scheduleInfo.getNotifications().getDestinationsOnFailure().add("New");
scheduleInfo.getDestination().setFromPlugin(smtp);
Edited by: Shannon Maret on Apr 21, 2009 7:02 PM

One thing to keep in mind is that "scheduling to SMTP" is different from "scheduling with email notification", and it looks like you're conflating the two. The ISchedulingInfo.getDestinations() is the access point for scheduling to SMTP and ISchedulingINfo.getNotifications() is the access point for scheduling with Notification.
> scheduleInfo.getNotifications().getDestinationsOnFailure().add("New");
You'd add the SI_PROGID of the SMTP Destination here, and work with the returned IDestination to set the destination parameters.
Sincerely,
Ted Ueda

Suddenly Bounced emails - Is there something changed or bugged with the HPePrint services?

Hello,
We are using HPePrint with several printers on different locations for over a year now, without any real problems.
But since yesterday, we get bounced email our of the blue. Nothing changed on our end, same email adresses used, but now our people all get the following error (except for the Received-From-MTA, which is different for most people from different offices):
----- Transcript of session follows -----
... while talking to email.hpeprint.com.:
DATA
<<< 550 5.7.1 Command rejected
554 5.0.0 Service unavailable
Reporting-MTA: dns; f-serve.identitycompany.net
Received-From-MTA: DNS; idc-vls.xs4all.nl
Arrival-Date: Sun, 11 Dec 2011 15:20:56 +0100 (CET)
Final-Recipient: RFC822; *****@hpeprint.com
Action: failed
Status: 5.7.1
Remote-MTA: DNS; email.hpeprint.com
Diagnostic-Code: SMTP; 550 5.7.1 Command rejected
Last-Attempt-Date: Sun, 11 Dec 2011 15:21:02 +0100 (CET)
What gives? Is the service REALLY unavaible for 2 days now, which I can't imagine from a large company as HP with it's prime marketing service ePrint.
We checked Spam/Blacklists to be sure that our Mailservers and office IPs aren't listed suddenly, and they are all not listed anywhere, so this can't be the problem.
Please explain what suddenly changed, and we missed somehow, or what we should change/update on our ends to get this working again, as it did up to a few days ago.

For those who are experiencing ongoing issues with their web services, you can attempt to try the following steps that may help resolve your problems.
1.) Completely shut down your printer and restart it
2.) If you have prints that have not printed, log into ePrint Center (or create an account if you do not have one) and then look for your printer status. If printer status is green but you still have pending jobs, delete the pending jobs one at a time (Starting with the oldest first). There may be a print job stuck in the queue that further restricts other jobs from completing.
If option 1 or 2 above still doesn’t work, removing web services and re-adding web services will cause the printer to reattach to the cloud.
Please note that if you attempt option 3, you will get a new eprint email address (and lose your custom one with no ability to get it back) furthermore, you will need to re-add your printer back to your ePC account.
I am an HP employee

How to filter to trash email w/ subject line of huge length of varying cryptic characters?

example from cropped screen shot:
could not load; abbreviated transcribing of just some of the subject line text:
=?iso-8859-1?B?SWYgeW91IGhhdmUgYSBmZXcgYwVudHMgb...

As the subject line will change for every email, it is not worth setting up a filter for every email.
Suggest you set up your Junk controls and train them to recognise Junk mail.
Then select the email as 'Junk'.
You can also setup Junk to empty on a regular basis,
Work through the info at the link to set up Junk Controls.
http://kb.mozillazine.org/Junk_Mail_Controls
However, are you sure it is junk mail and something in encoding has not been configured correctly?
What version of Thunderbird are you using and what OS?
View > character encoding
what is selected?
What happens when you select : Western ISO-8859-1
Tools > Options > Display > formatting tab
click on 'Advanced ' button
character Encoding:
What is set as outgoing mail?
what is set as Incoming Mail?

HT204380 How can I filter my 500+ email contacts to just those I can facetime chat with?

How can I filter my 500+ email contacts to just those I can facetime chat with?

You will need to remove it as your rescue email : log into your account via the 'manage your apple id' button on http://appleid.apple.com, select the 'Password And Security' section on your account's screen, and answer the two security questions that show - you should then be taken to another screen where you can change or remove your rescue email address.
Then try logging out of your account and then log back in and see if you can then use it as your primary email address.

Unable to set up BIS account and company emails

Hi,
I have the following story:
I changed carrier last week, until that everything worked fine, my yahoo, google and company emails. I use BIS.
Now, I am not able to setup my company email, but my other emails work ok, m phone is registered. I use these emails since many years and had 3-4 different bb models, having no problem to setup all of them.
So, i tried my new carrier's website to create a new account, I got the following message:
Cannot create account:
This action cannot be performed using a browser on a computer. Use the email setup application on your BlackBerry® smartphone to create an account.
I called my previous carrier, they say tham my PIN is deleted from their system.
My current carrier (vodafone hungary) says taht everything is fine from their side, it should work. And I have to fix my company email. When I try to set it up, I got the message that the server is not responding.
Any idea?

Thank you for all of those answers...they help a great deal.
You should talk with your work email admins to see if there's anything special about their system that needs to be accommodated in your configuration. Also, have them review this KB to be sure that they've opened up all that is required for BIS to properly integrate:
KB11036 Firewall and connection requirements for the BlackBerry Internet Service
Further, if the auto-configs do not properly sense what is needed, you may need to use advanced configuration...you select that by intentionally providing your correct email address, but an incorrect password. The next screen that should come up has a check-box for you to say you will provide manual settings...check that and then put into the fields what your email admins tell you is needed. That may perhaps work. It's called advanced integration, and here's the relevant KB:
KB10154 How to integrate a POP or IMAP email account through advanced integration
While rare, it is also possible for some internet-facing email systems to not be able to configure into BIS. However, since you say you had this email account previously working on your BB, this result would not be logical -- unless the email admins changed something on their side.
I am curious about two of your responses though...those you talk about re-registering and creating a new account. One BB PIN can have only one BIS account at any given time (and only on one carrier at a time). So, unless your BIS account were first deleted, you would of course fail to be able to create a new one.
It is also possible that perhaps you indeed are not providing the proper credentials when you configure...if there is a combination of numbers and symbols in your credentials, then you need to be especially careful when entering those, especially via the device interface. For instance, if your password is
ab123
and you enter
a > b > ALT > 1 > 2 > 3
the actual result will be
ab1er
You must enter
a > b > ALT > 1 > ALT > 2 > ALT > 3
in order to wind up with ab123. So, in this example, while on the BB keyboard you think you are typing ab123, you are actually typing ab1er.
You may also need to take that risk of having a Vodafone rep attempt configuring this into your account for you.
Good luck and let us know!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Where has the 'bounce email' feature gone from Lion?

Mail works OK after upgrade to LIon, I have set it up in classic mode for now. However, I can't find the 'bounce email' feature. This used to be a good way to reduce spam.
Please Apple, let me have this feature back.

i have just 'upgraded' to osx LION and CANNOT believe you have dropped the BOUNCE feature from mail.
Why?????? PLEASE PUT IT BACK immediately - it is one of the main differences between apple mail and postbox. You are losing customers doing this - I am going back to snow leopard till you fix it. RIDICULOUS decision !!!!

I can't remember my security questions and the email account I set for them no longer works what should I do???

So I tried paying for games on my my new iPhone but they wanted me to answer security questions but I don't remember the answers and the email they send them to is one I made when I was younger so I'm not sure what it is what should I do?

If it hasn't come through after a few hours and didn't end up in the spam filter, click here and request assistance.
(79160)

Ironport alt-mailhost filter and bounced emails.

Similar Messages

Maybe you are looking for