Question concerning blocked sites?

[jdnorris]

We have recently incorporated messagelabs to help us with our spam issue. I was checking out the host watch and noticed that it is blocking in/out from message lab. I have added them to the exceptions list, but its still blocking them. Any suggestions?

Getting a "syn" and "rst" (blocked site) in the log file.

How do we keep them from being blocked?

 

[pankajchawla]

Uncheck the optins of autoblock source of packets not handled and block sys flood attacks in policy manager>>Setup>>intrusion prevention>>default packet handling.

Make sure that you dont get denies on port 113. If you get make auth service incomig same as smtp service.

Go to properties of smtp and uncheck enable autoblocking in PAD

 

[jdnorris]

Both are unchecked. I think Im going to add the IP addresses to the Block Site Exceptions list.

 

[jdnorris]

I checked that and those were already unchecked. I added the address to the blocked sites exeptions list and it worked, but there are going to be dozens of addresses. There must be another way to fix this.

 

[coladmin]

I have a similar setup with an external SPAM provider and you need to be sure you have the folloing rules

SMTP

in from the message labs server to your servers

out from your servers to any

AUTH

in from the message labs servers

out from your servers to any

coladmin