ISA SMTP Filters not applying properly

From: Tony Su (anonymous_at_discussions.microsoft.com)
Date: 04/12/04


Date: Mon, 12 Apr 2004 08:52:23 -0700

This might apply to you...

I noticed recently that some virii are getting tricky...

So for instance I was blocking SCR but was noticing a
number of messages getting through which appeared to have
that extension.

Upon closer examination, the extension for the unfiltered
messages were "SCR."

Tony Su

>-----Original Message-----
>I have recently setup the SMTP filtering extension on my
>ISA 2000 Server. After a troublesome start I was able to
>get the SMTP filter to filter out by file extension and
>by email sender. This has been working without problem
>now for several weeks. I recently added some more
>entries to the file extension list. However, the filter
>is not stopping these new extensions. I have even
>rebooted the sytem just to make sure that everything
>restarted. All of the original filter items still
>function properly.
>
>I have the IIS SMTP service installed on the firewall
>with the ISA server published to the SMTP service. This
>has been setup as a smart host for my backend Exchange
>server.
>
>Is there a trick to getting new entries to be blocked by
>the filter?
>
>Thanks,
>Wayne Jones
>
>.
>



Relevant Pages

  • ISA SMTP Filter
    ... I have recently setup the SMTP filtering extension on my ... get the SMTP filter to filter out by file extension and ... with the ISA server published to the SMTP service. ...
    (microsoft.public.isa)
  • ISA SMTP Filter
    ... I have recently setup the SMTP filtering extension on my ... get the SMTP filter to filter out by file extension and ... with the ISA server published to the SMTP service. ...
    (microsoft.public.isa.configuration)
  • ISA SMTP Filters not applying properly
    ... I have recently setup the SMTP filtering extension on my ... get the SMTP filter to filter out by file extension and ... with the ISA server published to the SMTP service. ...
    (microsoft.public.isa)
  • ISA SMTP Filters not applying properly
    ... extension, such as .scr and .exe. ... filter since the initial deploy date of the filter. ... >>I have recently setup the SMTP filtering extension on ...
    (microsoft.public.isa)
  • RE: URLScan and EXE
    ... Please record the tree structure with the key defined in this node, then create one .foo Key with the same to the .exe one. ... Close the regedit and then Windows OS loader will treat the .foo as one executable files, which will try to load it. ... "Can I change the file extension on the URL through an ISAPI filter after it passes through URLScan?" ...
    (microsoft.public.inetserver.iis.security)