MessageLabs and ISA

From: Wocka (warrick.fergisonnospamplease_at_hotmail.com)
Date: 03/16/04 

Date: Wed, 17 Mar 2004 09:34:17 +1100

Gidday,

Has anyone got MeggaseLams.com Anti-virus / Spam filtering working with ISA?
I don't know how on my ISA server I confige these restrictions.

The MessageLabs say to do the following
### Start email ###
Inbound Restrictions

The listed IP ranges should be used to restrict the hosts that are
authorised to connect to your mailserver, by implementing these restrictions
you are disallowing any SMTP traffic from outside world. Only MessageLabs
towers will be able to communicate with your mailserver giving you added
protection against viruses that email themselves direct to IP

If you have a firewall in place these restrictions will need to be made on
the firewall itself and not the mailserver, if you do not have a firewall
you will need to make the restrictions on the mailserver itself. The
configurations ranges you must use are:

Accept connection from 203.X.X.X (subnet mask 255.255.255.192)

Accept connection from 216.X.X.X (subnet mask 255.255.240.0)

Accept connection from 202.X.X.X (subnet mask 255.255.255.240)

Accept connection from 64.X.X.X (subnet mask 255.255.255.240)

Accept connection from 195.X.X.X

Deny Connection from 0.0.0.0 (subnet mask 0.0.0.0)

NOTE: If you do not deny connections from other hosts then you could run the
risk of infection by viruses that send themselves directly to an IP address.

Outbound Configuration:

You will need to configure your SMTP server to send e-mail out via the
Default Mail Route as detailed above under "Inbound Configuration" e.g.
cluster1.ap.messagelabs.com

### Emd email ### 

--
Wocka

Relevant Pages

  • Re: SMTP lockdown, MessageLabs
    ... Create A New Network & Create A New Network Set ... Configuration> Networks ... directly to our ISA Server using its external IP address. ... configure our ISA Server to accept SMTP email only from the MessageLabs ...
    (microsoft.public.isa.configuration)
  • Problem with sendmail and mx records
    ... name unknown; sleeping for retry". ... i08F3kYA003187: return to sender: Local configuration error ... Jan 8 20:35:26 mailserver sendmail: My unqualified host name ...
    (comp.os.linux.setup)
  • Problem with sendmail and mx records
    ... name unknown; sleeping for retry". ... i08F3kYA003187: return to sender: Local configuration error ... Jan 8 20:35:26 mailserver sendmail: My unqualified host name ...
    (comp.os.linux.questions)
  • smtp and nat problems
    ... The problem is related to this configuration: ... mailserver has private ip address natted to a public ip address by firewall. ... Sending mails to certain domains works and to other doesn't. ...
    (comp.mail.sendmail)
  • Re: ISA IIS Exchange 2003
    ... MCS often recommends this configuration. ... Configuring ISA Server: http://tinyurl.com/1llp ... "Phillip Windell" wrote in message ...
    (microsoft.public.isa)