Mail rules , why go forward mail in addition to Annex

我用郵件規則,把指定Mail轉發到指定Mail,但附件就失蹤了!怎麼辦?

Similar Messages

Mail v7.2 rule doesn't forward received emails

I am attempting to write a Mail rule to automatically forward all emails I receive from our HOA to my wife. I am able to creat rules that correctly intercept emails from our HOA and move them to seperate mailboxes, but I am unable to forward emails either as a second step in a mail rule or as a stand alone rule.

This doesn't work for me. I can get a rule to correctly identify a received email from a specified source, but I cannot get a rule to forward the email. I have written test rules that moves an email to a specified mailbox so I know the correct identification of incoming emails and the 2nd action is working, but when I then attempt to change the test rule so that the 2nd function forwards the email and that does not work.
Arthur

Asymmetric NAT rules matched for forward and reverse flows - NAT Issue

Having a problem with a VPN site trying to communicate to a subnet off my ASA 5505.   The network is simple, VPN IPSEC remote site is 192.168.6.0/24 and I can ping and access hosts on 192.168.10.0/24 (called InfraNet).   I am now trying to allow communications between 192.168.6.0/24 (called FD_net) to 192.168.9.0/24 (called Inside)
The Error:
5          Nov 12 2012          13:52:50                    192.168.9.19                                        Asymmetric NAT rules matched for forward and reverse flows; Connection for icmp src outside:192.168.6.11 dst inside:192.168.9.19 (type 8, code 0) denied due to NAT reverse path failure
I understand this is a NAT issue; but I not seeing the error and could use a second set of eyes.   Here's my current running configuration.
: Saved
ASA Version 8.3(2)
hostname fw1
domain-name xxxxxxxx.xxx
enable password <removed>
passwd <removed>
names
interface Vlan1
description Town Internal Network
nameif inside
security-level 100
ip address 192.168.9.1 255.255.255.0
interface Vlan2
description Public Internet
nameif outside
security-level 0
ip address 173.xxx.xxx.xxx 255.255.255.248
interface Vlan3
description DMZ (CaTV)
nameif dmz
security-level 50
ip address 192.168.2.1 255.255.255.0
interface Vlan10
description Infrastructure Network
nameif InfraNet
security-level 100
ip address 192.168.10.1 255.255.255.0
interface Vlan13
description Guest Wireless
nameif Wireless-Guest
security-level 25
ip address 192.168.1.1 255.255.255.0
interface Vlan23
nameif StateNet
security-level 75
ip address 10.63.198.2 255.255.255.0
interface Vlan33
description Police Subnet
shutdown
nameif PDNet
security-level 90
ip address 192.168.0.1 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
switchport trunk allowed vlan 1,5,10,13
switchport trunk native vlan 1
switchport mode trunk
speed 100
duplex full
interface Ethernet0/2
switchport access vlan 3
interface Ethernet0/3
interface Ethernet0/4
switchport trunk allowed vlan 1,10,13
switchport trunk native vlan 1
switchport mode trunk
interface Ethernet0/5
switchport access vlan 23
interface Ethernet0/6
shutdown
interface Ethernet0/7
switchport trunk allowed vlan 1
switchport trunk native vlan 1
switchport mode trunk
shutdown
banner exec                     Access Restricted to Personnel Only
banner login                     Access Restricted to Personnel Only
ftp mode passive
clock timezone EST -5
clock summer-time EDT recurring
dns server-group DefaultDNS
domain-name xxxxxxx.xxx
same-security-traffic permit inter-interface
object network obj_any
subnet 0.0.0.0 0.0.0.0
object service IMAPoverSSL
service tcp destination eq 993
description IMAP over SSL
object service POPoverSSL
service tcp destination eq 995
description POP3 over SSL
object service SMTPwTLS
service tcp destination eq 465
description SMTP with TLS
object network obj-192.168.9.20
host 192.168.9.20
object network obj-claggett-https
host 192.168.9.20
object network obj-claggett-imap4
host 192.168.9.20
object network obj-claggett-pop3
host 192.168.9.20
object network obj-claggett-smtp
host 192.168.9.20
object network obj-claggett-imapoverssl
host 192.168.9.20
object network obj-claggett-popoverssl
host 192.168.9.20
object network obj-claggett-smtpwTLS
host 192.168.9.20
object network obj-192.168.9.120
host 192.168.9.120
object network obj-192.168.9.119
host 192.168.9.119
object network obj-192.168.9.121
host 192.168.9.121
object network obj-wirelessnet
subnet 192.168.1.0 255.255.255.0
object network WirelessClients
subnet 192.168.1.0 255.255.255.0
object network obj-dmznetwork
subnet 192.168.2.0 255.255.255.0
object network FD_Firewall
host 74.94.142.229
object network FD_Net
subnet 192.168.6.0 255.255.255.0
object network NETWORK_OBJ_192.168.10.0_24
subnet 192.168.10.0 255.255.255.0
object network obj-TownHallNet
subnet 192.168.9.0 255.255.255.0
object network obj_InfraNet
subnet 192.168.10.0 255.255.255.0
object-group service EmailServices
description Normal Email/Exchange Services
service-object object IMAPoverSSL
service-object object POPoverSSL
service-object object SMTPwTLS
service-object tcp destination eq https
service-object tcp destination eq imap4
service-object tcp destination eq pop3
service-object tcp destination eq smtp
object-group service DM_INLINE_SERVICE_1
service-object object IMAPoverSSL
service-object object POPoverSSL
service-object object SMTPwTLS
service-object tcp destination eq pop3
service-object tcp destination eq https
service-object tcp destination eq smtp
object-group service DM_INLINE_SERVICE_2
service-object object IMAPoverSSL
service-object object POPoverSSL
service-object object SMTPwTLS
service-object tcp destination eq https
service-object tcp destination eq pop3
service-object tcp destination eq smtp
object-group network obj_clerkpc
description Clerk's PCs
network-object object obj-192.168.9.119
network-object object obj-192.168.9.120
network-object object obj-192.168.9.121
object-group network TownHall_Nets
network-object 192.168.10.0 255.255.255.0
network-object object obj-TownHallNet
object-group network DM_INLINE_NETWORK_1
network-object 192.168.10.0 255.255.255.0
network-object 192.168.9.0 255.255.255.0
access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_2 any interface outside
access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any host 192.168.9.20
access-list StateNet_access_in extended permit ip object-group obj_clerkpc any
access-list outside_2_cryptomap extended permit ip object-group DM_INLINE_NETWORK_1 object FD_Net
pager lines 24
logging enable
logging asdm debugging
logging mail errors
logging from-address hostmaster@xxxxxxxxx
logging recipient-address john@xxxxxxxxx level errors
mtu inside 1500
mtu outside 1500
mtu dmz 1500
mtu Wireless-Guest 1500
mtu StateNet 1500
mtu InfraNet 1500
mtu PDNet 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-635.bin
no asdm history enable
arp timeout 14400
nat (InfraNet,outside) source static TownHall_Nets TownHall_Nets destination static FD_Net FD_Net
nat (inside,outside) source static TownHall_Nets TownHall_Nets destination static FD_Net FD_Net
object network obj_any
nat (inside,outside) static interface
object network obj-claggett-https
nat (inside,outside) static interface service tcp https https
object network obj-claggett-imap4
nat (inside,outside) static interface service tcp imap4 imap4
object network obj-claggett-pop3
nat (inside,outside) static interface service tcp pop3 pop3
object network obj-claggett-smtp
nat (inside,outside) static interface service tcp smtp smtp
object network obj-claggett-imapoverssl
nat (inside,outside) static interface service tcp 993 993
object network obj-claggett-popoverssl
nat (inside,outside) static interface service tcp 995 995
object network obj-claggett-smtpwTLS
nat (inside,outside) static interface service tcp 465 465
object network obj-192.168.9.120
nat (inside,StateNet) static 10.63.198.12
object network obj-192.168.9.119
nat (any,StateNet) static 10.63.198.10
object network obj-192.168.9.121
nat (any,StateNet) static 10.63.198.11
object network obj-wirelessnet
nat (Wireless-Guest,outside) static interface
object network obj-dmznetwork
nat (any,outside) static interface
object network obj_InfraNet
nat (InfraNet,outside) static interface
access-group outside_access_in in interface outside
access-group StateNet_access_in in interface StateNet
route outside 0.0.0.0 0.0.0.0 173.166.117.190 1
route StateNet 10.0.0.0 255.0.0.0 10.63.198.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
http server enable 5443
http 192.168.9.0 255.255.255.0 inside
http 74.xxx.xxx.xxx 255.255.255.255 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto map outside_map 2 match address outside_2_cryptomap
crypto map outside_map 2 set pfs
crypto map outside_map 2 set peer 173.xxx.xxx.xxx
crypto map outside_map 2 set transform-set ESP-3DES-SHA
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
telnet 192.168.9.0 255.255.255.0 inside
telnet timeout 5
ssh 192.168.9.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
dhcpd dns 208.67.222.222 208.67.220.220
dhcpd lease 10800
dhcpd auto_config outside
dhcpd address 192.168.2.100-192.168.2.254 dmz
dhcpd dns 8.8.8.8 8.8.4.4 interface dmz
dhcpd enable dmz
dhcpd address 192.168.1.100-192.168.1.254 Wireless-Guest
dhcpd enable Wireless-Guest
threat-detection basic-threat
threat-detection statistics host number-of-rate 2
threat-detection statistics port
threat-detection statistics protocol
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ntp server 63.240.161.99 source outside prefer
ntp server 207.171.30.106 source outside prefer
ntp server 70.86.250.6 source outside prefer
webvpn
group-policy FDIPSECTunnel internal
group-policy FDIPSECTunnel attributes
vpn-idle-timeout none
vpn-tunnel-protocol IPSec l2tp-ipsec
username support password <removed> privilege 15
tunnel-group 173.xxx.xxx.xxx type ipsec-l2l
tunnel-group 173.xxx.xxx.xxx general-attributes
default-group-policy FDIPSECTunnel
tunnel-group 173.xxx.xxx.xxx ipsec-attributes
pre-shared-key *****
smtp-server 192.168.9.20
prompt hostname context
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:e4dc3cef0de15123f11439822880a2c7
: end
Any ideas would be appreciated.
John

I don't see any inspection-commands in your config. Is there a reason for not using any of them?
If your problem is only with ICMP, then you should enable at least icmp-inspection. You can do that easiely with the legacy command " fixup protocol icmp"
Sent from Cisco Technical Support iPad App

Asymmetric NAT rules matched for forward and reverse flows

Hi! I don't know why this comes up in the logs when I have configured my vpn like so:
crypto dynamic-map L2L_MAP 50 set reverse-route
crypto dynamic-map OUTSIDE_dyn_map 20 set transform-set ESP-3DES-SHA
crypto dynamic-map OUTSIDE_dyn_map 40 set pfs
crypto dynamic-map OUTSIDE_dyn_map 40 set transform-set ESP-3DES-SHA
crypto dynamic-map OUTSIDE_dyn_map 60 set pfs
crypto dynamic-map OUTSIDE_dyn_map 60 set transform-set ESP-3DES-SHA
crypto dynamic-map OUTSIDE_dyn_map 65535 set transform-set ESP-3DES-SHA
crypto dynamic-map OUTSIDE_dyn_map 65535 set security-association lifetime seconds 288000
crypto dynamic-map OUTSIDE_dyn_map 65535 set security-association lifetime kilobytes 4608000
crypto dynamic-map INSIDE_dyn_map 20 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 20 match address IDP_VPN
crypto map L2L_MAP 20 set peer x.x.x.x
crypto map L2L_MAP 20 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 40 match address cp_l2l_map_40
crypto map L2L_MAP 40 set peer x.x.x.x
crypto map L2L_MAP 40 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 60 match address bwi_l2l
crypto map L2L_MAP 60 set peer x.x.x.x
crypto map L2L_MAP 60 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 80 match address outside_80_cryptomap
crypto map L2L_MAP 80 set peer x.x.x.x
crypto map L2L_MAP 80 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 65535 ipsec-isakmp dynamic OUTSIDE_dyn_map
crypto map L2L_MAP interface outside
crypto map INSIDE_map 65535 ipsec-isakmp dynamic INSIDE_dyn_map
crypto map INSIDE_map interface inside
I am able to connect successfully via vpn client. Its just that i cant reach the internal servers... Any ideas?
i get this error:
Oct 18 2012 00:52:37: %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for udp src outside:10.10.13.221/137 dst inside:10.10.13.255/137 denied

I put in the important configs:
interface GigabitEthernet0/0
nameif outside
security-level 0
ip address x.x.x.x 255.255.255.0 standby x.x.x.x
ospf cost 10
interface GigabitEthernet0/1
nameif inside
security-level 100
ip address 10.10.13.5 255.255.255.0 standby 10.10.13.6
ospf cost 10
interface GigabitEthernet0/2
nameif dmz
security-level 50
no ip address
ospf cost 10
interface GigabitEthernet0/2.720
vlan 720
nameif dmz-vsp
security-level 50
ip address 172.24.0.1 255.255.255.0 standby 172.24.0.2
ospf cost 10
interface GigabitEthernet0/2.724
vlan 724
nameif dmz-dbz
security-level 75
ip address 172.24.4.1 255.255.255.0 standby 172.24.4.2
ospf cost 10
interface GigabitEthernet0/2.725
vlan 725
nameif dmz-smtp
security-level 50
ip address 172.24.5.1 255.255.255.0 standby 172.24.5.2
ospf cost 10
dns domain-lookup outside
dns domain-lookup inside
dns server-group DefaultDNS
name-server 10.10.10.50
domain-name xxxx.local
access-list nonatacl extended permit ip 10.10.0.0 255.255.0.0 10.40.4.0 255.255.255.0
access-list nonatacl extended permit ip 172.16.0.0 255.255.0.0 10.40.4.0 255.255.255.0
access-list nonatacl extended permit ip 192.168.2.0 255.255.255.0 10.40.4.0 255.255.255.0
access-list nonatacl extended permit ip 192.168.3.0 255.255.255.0 10.40.4.0 255.255.255.0
access-list nonatacl extended permit ip 10.10.0.0 255.255.0.0 10.40.14.0 255.255.255.0
access-list nonatacl extended permit ip 10.10.13.0 255.255.255.0 10.10.10.0 255.255.255.0
access-list nonatacl extended permit ip 10.10.10.0 255.255.255.0 10.10.13.0 255.255.255.0
access-list nonatacl extended permit ip 10.10.13.0 255.255.255.0 192.168.6.0 255.255.255.0
access-list nonatacl extended permit ip 192.168.6.0 255.255.255.0 10.10.13.0 255.255.255.0
ip local pool inshse-vpn-pool2 192.168.6.220-192.168.6.230 mask 255.255.255.0
global (outside) 201 192.168.16.1-192.168.16.250
global (outside) 202 10.201.5.145-10.201.5.158
global (outside) 4 10.10.13.180-10.10.13.189 netmask 255.0.0.0
global (outside) 101 interface
global (outside) 1 x.x.x.x netmask 255.0.0.0
global (inside) 204 10.10.13.70-10.10.13.79 netmask 255.0.0.0
nat (inside) 0 access-list nonatacl
nat (inside) 201 access-list NAT_TO_IDP
nat (inside) 202 access-list inside2-vsp_nat_outbound
nat (inside) 101 0.0.0.0 0.0.0.0
nat (dmz-vsp) 202 access-list dmz-vsp_nat_outbound
nat (dmz-vsp) 101 0.0.0.0 0.0.0.0
route outside 0.0.0.0 0.0.0.0 x.x.x.x 1
route inside 10.0.0.0 255.240.0.0 10.10.13.1 1
route inside 10.40.1.0 255.255.255.0 10.10.13.1 1
route inside 10.40.2.0 255.255.255.0 10.10.13.1 1
route inside 10.40.3.0 255.255.255.0 10.10.13.1 1
route inside 10.40.4.0 255.255.255.0 10.10.13.1 1
route inside 10.40.13.0 255.255.255.0 10.10.13.1 1
route inside 10.40.254.0 255.255.255.0 10.10.13.1 1
route inside 172.16.0.0 255.255.0.0 10.10.13.1 1
route inside 192.168.2.0 255.255.255.0 10.10.13.1 1
dynamic-access-policy-record DfltAccessPolicy
aaa-server VPN_Auth protocol radius
aaa-server VPN_Auth (inside) host 10.10.2.20
timeout 5
key *****
no mschapv2-capable
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map L2L_MAP 50 set reverse-route
crypto dynamic-map OUTSIDE_dyn_map 20 set transform-set ESP-3DES-SHA
crypto dynamic-map OUTSIDE_dyn_map 40 set pfs
crypto dynamic-map OUTSIDE_dyn_map 40 set transform-set ESP-3DES-SHA
crypto dynamic-map OUTSIDE_dyn_map 60 set pfs
crypto dynamic-map OUTSIDE_dyn_map 60 set transform-set ESP-3DES-SHA
crypto dynamic-map OUTSIDE_dyn_map 65535 set transform-set ESP-3DES-SHA
crypto dynamic-map OUTSIDE_dyn_map 65535 set security-association lifetime seconds 288000
crypto dynamic-map OUTSIDE_dyn_map 65535 set security-association lifetime kilobytes 4608000
crypto dynamic-map INSIDE_dyn_map 20 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 20 match address IDP_VPN
crypto map L2L_MAP 20 set peer x.x.x.x
crypto map L2L_MAP 20 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 40 match address cp_l2l_map_40
crypto map L2L_MAP 40 set peer x.x.x.x
crypto map L2L_MAP 40 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 60 match address nonatacl
crypto map L2L_MAP 60 set peer x.x.x.x
crypto map L2L_MAP 60 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 80 match address outside_80_cryptomap
crypto map L2L_MAP 80 set peer x.x.x.x
crypto map L2L_MAP 80 set transform-set ESP-3DES-SHA
crypto map L2L_MAP 65535 ipsec-isakmp dynamic OUTSIDE_dyn_map
crypto map L2L_MAP interface outside
crypto map INSIDE_map 65535 ipsec-isakmp dynamic INSIDE_dyn_map
crypto map INSIDE_map interface inside
crypto isakmp enable outside
crypto isakmp enable inside
crypto isakmp enable dmz
crypto isakmp enable dmz-vsp
crypto isakmp policy 20
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 65535
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
no vpn-addr-assign aaa
no vpn-addr-assign dhcp
group-policy ihasavpn2_gp internal
group-policy ihasavpn2_gp attributes
dns-server value 10.10.10.52
vpn-tunnel-protocol IPSec
default-domain value xxxx.local
tunnel-group ihasavpn2 type remote-access
tunnel-group ihasavpn2 general-attributes
address-pool inshse-vpn-pool2
authentication-server-group VPN_Auth
authentication-server-group (inside) VPN_Auth
default-group-policy ihasavpn2_gp
tunnel-group ihasavpn2 ipsec-attributes
pre-shared-key *****
tunnel-group ihasavpn2 ppp-attributes
authentication ms-chap-v2

%ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for tcp src outside:10.159.159.3/49204 dst tru777:10.1.34.19/3389 denied due to NAT reverse path failure

Hi,
I have an ASA5510 running version 8.2(5). I have set up a new network on interface Ethernet0/1.777 of the fwl. The firewall works perfectly with remote access VPNs but has now given me the error with the new network that has been set up:
%ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for tcp src outside:10.159.159.3/49204 dst tru777:10.1.34.19/3389 denied due to NAT reverse path failure
The difference between the other networks and the new one that I have set up is that this is the first one using a private addressing scheme. I understand that NAT is not allowing something along the way but I cant figure out what needs to change in order to get it to work. My config is as follows:
interface Ethernet0/1.777
description TRU 777
vlan 777
nameif tru777
security-level 50
ip address 10.1.34.17 255.255.255.240 standby 10.1.34.18
access-list acl_tru777 remark * ALLOW ALL OUTBOUND *
access-list acl_tru777 extended permit ip any any
access-list RA-VPN extended permit ip 10.1.34.16 255.255.255.240 10.159.159.0 255.255.255.0
access-list acl_no-nat extended permit ip 10.1.34.0 255.255.255.0 10.0.0.0 255.0.0.0
access-list acl_no-nat extended permit ip 10.1.34.0 255.255.255.0 172.16.0.0 255.240.0.0
access-list acl_no-nat extended permit ip 10.1.34.0 255.255.255.0 192.168.0.0 255.255.0.0
access-list acl_ra-lock-tru777 extended permit ip 10.1.34.16 255.255.255.240 10.159.159.0 255.255.255.0
access-list acl_ra-lock-tru777 extended permit ip 10.159.159.0 255.255.255.0 10.1.34.16 255.255.255.240
ip local pool ra-pool 10.159.159.0-10.159.159.254 mask 255.255.255.0
nat (tru777) 4 access-list acl_no-nat
nat (tru777) 2 10.1.34.16 255.255.255.240
global (outside) 2 x.x.x.x
crypto isakmp nat-traversal 20
I think that is everything you should need, if not please just ask.
Thank you very much in advance,
Chris

Hi Julio,
Here you go:
FWL01# sh nameif
Interface                Name                     Security
Ethernet0/0              outside                    0
Ethernet0/1              CLIENTS                 50
Ethernet0/1.314        tru01                      50
Ethernet0/1.313        dmz01                    50
Ethernet0/1.316        tru02                      50
Ethernet0/1.776        dmz776                  50
Ethernet0/1.777        tru777                     50
Management0/0       management           100
FWL01# sh run nat
nat (tru02) 1 192.168.3.0 255.255.255.240
nat (tru777) 4 access-list acl_no-nat
nat (tru777) 2 10.1.34.16 255.255.255.240
FWL01#    sh run glob
global (outside) 1 interface
global (outside) 2 x.x.x.x
Thanks,
Chris

Rewrite rules: how to forward all mails to the specific channel?

I have written an anti-virus plugin using the MTA SDK. Now I want to forward all the incoming messages to the channel, which is 'guarded' by my program (so my program is the channel's master).
I've added following to the end of imta.cnf, according to MTA SDK example:
! kav
x-kav master_debug logging
x-kav-daemon
And at the beginning of imta.cnf:
avp.ru $U%avp.ru@x-kav-daemon$Nx-kav
avp.ru $[email protected]
In this configuration, any incoming mail just miss my channel completely.
I changed it to this one:
$* $U%avp.ru@x-kav-daemon$Nx-kav
<2nd line removed>
in this case, mail is sent to our channel, but has host part '$*', and the message is failed to enqueue.
Also, it seems like this reqrite entry conflicts with ours:
! Rules to select local users
$* $A$E$F$U%$H$V$[email protected]
ultra5.avp.ru $U%$[email protected]
avp.ru $U%$[email protected]
As I understand, according to these rules, everything goes to @avp.ru or @ultra5.avp.ru goes to the local delivery channel ultra5.avp.ru. This is not what I want.
So, the questions are:
1. How to move all the messages (or just messages. which matched the specific domain) into my channel?
2. How to configure rewrite rules, so the message can leave the channel after processing, and continue the routing?

Still doesn't work.
We've downloaded and installed patch 116568-52, and configured the channels:
tcp_local aliasdetourhost tcp_scan smtp mx single_sys remotehost inner switchchannel identnonenumeric subdirs 20 maxjobs 7 pool SMTP_POOL maytlsserver maysaslserver saslswitchchannel tcp_auth missingrecipientpolicy 0
tcp-daemon
! tcp_intranet
tcp_intranet aliasdetourhost tcp_scan smtp mx single_sys subdirs 20 dequeue_removeroute maxjobs 7 pool SMTP_POOL maytlsserver allowswitchchannel saslswitchchannel tcp_auth missingrecipientpolicy 4 tcp_intranet-daemon
tcp_scan smtp mx single_sys subdirs 20 noreverse maxjobs 7 pool SMTP_POOL dequeue_removeroute
tcp_scan
After sending the message, it silently goes to tcp_scan channel, and handled by channel master program. After that the message stays in tcp_scan queue forever, with HELD extension.
Our channel master enqueues the processed message into the channel where it dequeues it, so the message seems to be looped. Here is the message:
t;1093881341
p;3
*;4
u;mailsrv
c;tcp_scan
s;tcp_scan.ultra5.avp.ru
n;f
h;<[email protected]>
m;[email protected]
d;20
j;rfc822
f;[email protected]
@tcp_scan:[email protected]
..Boundary_(ID_+ko348xG8vRKcadifuDhJg)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:41 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:41 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:41 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:41 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:40 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:40 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:40 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:40 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:40 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:40 +0400 (MSD)
Received: from tcp_scan.ultra5.avp.ru by ultra5.avp.ru
(Sun Java System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004))
id <[email protected]> for [email protected] (ORCPT [email protected]
30 Aug 2004 19:55:40 +0400 (MSD)
Received: from localhost.localdomain ([172.16.0.35])
by ultra5.avp.ru (Sun Java System Messaging Server 6.1 HotFix 0.01 (bu
24 2004)) with ESMTP id <[email protected]> for test@avp.
(ORCPT [email protected]); Mon, 30 Aug 2004 19:55:39 +0400 (MSD)
Content-return: allowed
Date: Mon, 30 Aug 2004 19:55:39 +0400 (MSD)
Date-warning: Date header was inserted by ultra5.avp.ru
From: [email protected]
Subject: sent on Mon Aug 30 19:58:29 2004
To: Undisclosed recipients: ;
Message-id: <[email protected]>
..Boundary_(ID_+ko348xG8vRKcadifuDhJg)
How to avoid this loop? Should our master enqueue the processed messages into another channel? If yes, what channel should we enqueue to? If no, how to avoid this loop?

Mail Rule Applescript to Forward Email Attachments Only

Hi Everyone,
I'm running 10.8.4 and Mail 6.5. Using Mail Rules, I'd like to forward emails containing attachments but not the message content (contained in the email to be forwarded). I am not an AppleScriptor but have tried to write code...with no luck. Does anyone know of such a script that can be activated using Mail Rules? Or propose a script I could use?

Hi Everyone,
I'm running 10.8.4 and Mail 6.5. Using Mail Rules, I'd like to forward emails containing attachments but not the message content (contained in the email to be forwarded). I am not an AppleScriptor but have tried to write code...with no luck. Does anyone know of such a script that can be activated using Mail Rules? Or propose a script I could use?

Fill in for Me Substitution Rule - Why no offline approval mail to Deputy?

Dear Experts,
in SRM 7.0 CS, i am facing the following question w.r.t. the substitution rule:
When a user (approver) creates the Receive my tasks substitution rule for a deputy, than, when ever there are new SC get ordered that need to receive an approval from the "original" approver, not only this original approver but also the deputy receives a the offline approval mail.
But in case the "original" approver maintaines the second substitution rule - the Fill in for Me rule, than no offline approval mail is sent out to the deputy.
Can you maybe help me out with a pointer regarding a possible root cause?
Thank you very much.

Hi Balaji.T.
sorry for the missing clarity in the formulation.
What i usually see in my system is, that when a work item is created (in general) than on one hand this work item gets sent via the workflow to the (universal) work list of the responsible. And on another hand, there is also an offline approval mail that is being sent via an email to the approver. In that offline approval mail, there is a description of the shopping cart content and also a link included. Via that link the approver can branch out into the shopping cart itself, out of the offline approval mail.
So, the above described behaviour i see also, when the first of the substitution rules is used. The delegate receives both, the work item via the workflow into the work list. And also the offline approval e-mail.
But when the second substitution rule is in use, than there is only the distribution of the workitem to the work list of the delegate there. But the delegate does not receive the offline approval e-mail.
Thank you.

How to send an e-mail to additional recipients as CC

I have the need to code a PPF action which sends an e-mail (smartform) not only to the main recipient(s) but also to additional recipients as CC.
I am wondering if module SO_NEW_DOCUMENT_ATT_SEND_API1 does the job, but I am very skeptical.
Has someone already done it and who can share his experience?

Dear Riccardo,
the best approach for this issue is to follow the description and example of note #935670.
The general outline is as follows:
1. when calling the SF function module set parameter to get back the OTF document
*-----------get back OTF document --------------------------------------
* set 'ls_control_parameters-getotf' to get back the processed OTF
* document; OTF document is returned in 'job_output_info-oftdata'
* sending will be done in a later step
ls_control_parameters-getotf = sppf_true.
2. use class CL_BCS to send the document
There are standard example reports BCS_EXAMPLE_X X=1..5 which shows the general usage of this class to send messages. This class is the recommended interface for SAPconnect to generate and send messages. Whenever possible, please use this class instead of outdated function modules.
3. to add a second recipient as CC use
* set recipient (mandatory)
lo_recipient = cl_bor_object_bcs=>getu_persistent(
                        i_logsys = is_mail_recipient-logsys
                        i_objkey = is_mail_recipient-objkey
                        i_objtype = is_mail_recipient-objtype ).
call method send_request->add_recipient
    exporting
      i_recipient      = lo_recipient
*      i_express        = i_express
*      i_copy           = i_copy
*      i_blind_copy     = i_blind_copy
*      i_no_forward     = i_no_forward
* set CC recipient in addition (optional)
clear lo_recipient.
lo_recipient = cl_cam_address_bcs=>create_internet_address(
                        i_address_string = 'your.internet.address_at_domain.com'
                        i_address_name = 'Your Visible Name'
call method send_request->add_recipient
    exporting
      i_recipient      = lo_recipient
      i_copy           = sppf_true
That's all
Best regards, Daniel
Edited by: Daniel-Alexander Heller on Dec 3, 2008 10:24 AM

Mail account addition

I have a yahoo account. But can I make another e-mail account in OS X mail if I don't have a .mac account?

Is it possible to connect my yahoo account to mail so that when I click on an address in craigslist, a yahoo mail composition will open with forwarding address installed?
It's possible, but you'd have to install a few things and always be logged into Yahoo! Mail for it to work. Ultimately, it's easier to just pay to upgrade your Yahoo! account to a Yahoo! Mail Plus account--$20 per year is very cheap, especially when you have unlimited email storage, as well as the ability to send/receive email through Mail, and get very good spam filtering from Yahoo!
Mulder

Mac Mail creating additional Drafts

When I generate a message in Mac Mail, or when I reply to a message I have received, I often discover (after the reply/message has gone) that another version of the message is sitting in my drafts folder. Normally it is only a draft until it is sent, then it disappears from the draft folder. But not always. Initially I thought the message had not gone, so I clicked on send again and it then disappeared from the drafts folder, but the recipeint then told me they had received the same message twice.
Anyone any idea why the application is generating a second draft?

It may be account-related. From Mail Help:
Drafts mailbox
The Drafts mailbox contains messages you’ve saved but haven’t sent yet. The Drafts mailbox remains displayed until there are no drafts and you quit Mail.
If you have an Exchange or Internet Message Access Protocol (IMAP) account that is set to save drafts on the server, then as soon as Mail syncs with the server, any drafts you save are shown on your other computers that use that account. To see the drafts immediately, choose Mailbox > Synchronize for the account.

Period account closing bal includes cumul movements, even with a rule.WHY?!

Hello chaps, I've been struggling with this for a few days now and I'm going to have admit defeat. :(
I'm trying to do two things.
1. View periodic balance sheet movements
2. Get the correct custom closing balance to roll up once I've done 1 (in Periodic view)
What I've done.
For Point 1. I use the SwitchTypeForFlow attribute on the flow members. This let's me see the balance sheet movements in Periodic view. Great.
Which leads me onto Point 2. Whilst I can now see the balance sheet movements in Periodic view, the closing balance (the parent of Opening + increases - decreases) does not total correctly. Instead of adding the Opening + increases - decreases for ONE period, It adds them for ALL the previous periods.
Ok, so to get round that, I thought I'd just create a new member called "ClosingBal" and override what HFM is doing. I'll now have two rules. The "OpeningBal" is just the closing balance of last period. "ClosingBal" is just the sum of opening + increases - decreases for the period. So here are the two simple rules
HS.Exp "C1#OpeningBal=C1#ClosingBal.P#Prior"
HS.Exp "C1#ClosingBal=C1#OpeningBal+C1#increases-C1#decreases"
But when I do this, even with the rule, it STILL adds up the cumulative increases and decreases for all prior periods as well, not just the ones for the period. Why is it doing that? All I want is my closing balance in that one period to be equal to opening balance + increases - decreases. It works fine in YTD view, but not Periodic view. I need it to work in Periodic view
any help much appreciated.
Thanks,
Sal

Sal,
There is no solution here that allows the user to simpley change the View member from Periodic to YTD, keeping all else the same, and get your desired result. However, you could create a solution that when a user wants Periodic numbers he/she would select the Periodic View member and then select a unique ClosingBal member (eg. 'ClosingBalPer') and a unique OpenBal member (eg. 'OpenBalPeriodic'). When the user wants YTD numbers he/she would select the YTD View member and then select a different and also unique ClosingBal member (eg. 'ClosingBalYTD') and a different and also unique OpenBal member (eg. 'OpenBalYTD').
Here you would have 2 different rules for you opening balances:
HS.Exp "C1#OpeningBalPer=C1#ClosingBal.P#Prior"
HS.Exp "C1#OpeningBalYTD=C1#ClosingBal.P#Last.Y#Prior"
And your ClosingBal rules would look like this:
HS.Exp "C1#ClosingBalPer=C1#OpeningBalPer+C1#increases-C1#decreases"
HS.Exp "C1#ClosingBalYTD=C1#OpeningBalYTD+C1#increases-C1#decreases"
In regards to the ClosingBal rules, these aren't necessary if you make the ClosingBal member a parent of the other members. If 'decreases' need to be subtracted then they should be flagged as 'SwithSignForFlow'.
With this solution if a user selected YTD with the Periodic members or Periodic with the YTD members then their numbers wouldn't make sense so there would be some user eduction involved with this solution.

Can I setup a rule to auto forward or move messages in Microsoft Outlook Web Access for Firefox?

I am using Firefox 5.0 and Microsoft Office Outlook Web Access for email.
Is it possible to setup a rule to automatically move messages to a different folder, or to forward message to a different folder?
Thanks!

i haven't done it myself, i just pointed you to the article. Try it. If it does not work, you can Restore the Default settings. Save several Screenshots of the Default Settings to your Desktop to help you in case you want to Revert to the Default Settings.
Adding Screenshots - '''Creating the Screenshots''' (see this part to help you with Saving Screenshots
https://support.mozilla.com/en-US/kb/Adding%20screenshots
Check and tell if its working.

I did reinstalled the rules why asked me a card sim? I can't do anythig

Hello
I would like to know why isn't work my iphone 4 because I juste did the reinstallation of the rules. I though to do the OS that's all. And now I can't do anything is asking me a new sim card because is cloused the sim card.
Help me please !

This happens when you jailbreak and unofficially unlock your originally locked iPhone to work with another carrier.
Upgrading the iOS re-locks your iPhone to the carrier to which it was originally locked.
Only the carrier to which the iPhone is originally locked can officially unlock the iPhone. If it was a US-bought phone prior to one week ago, IT WILL NOT BE UNLOCKED UNDER ANY CIRCUMSTANCE.

In Bi7.0 instead of Transfer rules why v have Transformations

In b.i7 v have Transformations instead of Transforrules.why?

Hi,
you can still use transfer rules if you like. But transormation give you the option to be more flexible when updating data. You can define different behavior dependent where you want to update your data, e.g. you can define a different delta behaviour. The complete da load process gets easir you dont need infosourvce and update rules any longer, just an infopackage to load the data in PSA and then with DTP into your data targets.
Hope you got an idea
Regards
Juergen

Mail rules , why go forward mail in addition to Annex

Similar Messages

Maybe you are looking for