Exchange Norton AVF problem, please help! 1

[vic102482]

Hello, I am having a small problem. On my norton AVF, it is letting some versions of the new emails come through but only to external users.

We have a distrobution list with nothing but external contacts in it. So I have a list like Tek-Tips Friends, and I have my own domain, and of course no one else resides on this domain, they are only contacts.

Now when an email comes to one of my users inboxes, it works just fine. Its tagged and then deleted as it should. But if it goes to my external users with external email addresses inbox, it goes to them without the norton exchange server filtering it at all.

I think its coming off of my server, because #1 its in the headers, and #2 its tagged as spam when it gets to the users domain. We have GFI mail essentials running off of a secure relay server and it tags all spam with the [SPAM] tag.

What can I do to stop this? Should I look at another antivirus tool for exchange?

I am using version 3.05 of Norton AVF.

Please help me, people are getting pissed

 

[Marcs41]

That is because Norton is scanning your mailboxes and NOT your incoming SMTP traffic!
Forwarded mails to external contacts do not end up in a mailbox.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq219-2884

 

[vic102482]

Yeah I guessed as much. Im not the one who is "supposed" to be maintaining this crap. Whats my next step? Does norton AVF have this capability?

Or do I need another tool? Shouldnt an exchange antivirus tool be designed to filter incoming SMTP traffic?

But I have a relay server and its free on resources, it only does the GFI, so SMTP fitlering would be perfect for that box.

 

[Marcs41]

Exchange Antivirus will protect your Exchange server, and thus their clients.
You are not really using the server as such for thos forwards, so it will not get scanned.
What you should have is a firewall with SMTP scan BEFORE the mailserver.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq219-2884

 

[vic102482]

Thanks. I upgraded AVF and it added a feature to scan SMTP for content. Adding *.bat *.exe attachment names will do the trick for now. The only thing is if a *.ZIP file comes through it will pass.

I cant put a firewall SMTP filter up because there is already a spam SMTP filter up, I will have to put it on a third box.

 

[Marcs41]

well, good you can block most already, in worst case, you can add the ZIP too..