• 0

GFI MailSecurity


Question

I'm hoping someone will be able to assist me with this.

I'm trying to find a way for our Exchange 2003 Server to receive mail temporarily without the GFI MailSecurity Scanner processing the mail.

Has anyone come across a situation where they have needed to do this, however because of how tightly GFI integrates itself with Exchange, if you disable the services, it stops the queue.

Note: Apologies to mods if posted in the wrong forum.

Thanks :)

Link to comment
https://www.neowin.net/forum/topic/934756-gfi-mailsecurity/
Share on other sites

3 answers to this question

Recommended Posts

  • 0

We receive IronPort Secure E-mails, but at some point GFI is stripped the "defanghtml_" tags in the secure attachment on the e-mail, so when we open the attachment the correct html tags aren't being passed to the IronPort Server and thus, are stopping the server from providing the correct content on the page.

We are quite sure that this is GFI performing the stripped of the html, however we have disabled all the modules in GFI and wanted to disable GFI to test this. If we can't, the only option for us would seem to be to completely uninstall GFI.

Is this something you are able to assist with?

Thanks

  • 0

Well, as far as stripping content from e-mails, GFI shouldn't do that.

The only options for it's rule based filtering are to Delete/Quarantine/Block or Move/Forward.

SMTP Accepts the e-mail, a SMTP Sink is run that has GFI's engines scan the content of the mail againsted it's Rules/Filters. If it matches something, it takes the action set by the Rule/Filter.

GFI as far as I know will not modify ANY e-mail content, only take action based on rules.

However, you can always uninstall GFI, that will remove the sinks from the SMTP server. Just leave the GFI folder in program files intact.

Once you are done testing and want to add GFI back, just reinstall it to the same folder it was installed to prior and all of the settings will remain that you had prior.

**UPDATE**

OH I just found something in the newest version that they carried over from GFI Mail Essentials.

Go into GFI Mail Security Console and look for "Configure HTML Sanitizer", uncheck the "Enable HTML Sanitizer" and apply.

If you've already tried that, then a Uninstall might be worth a shot just to test, as you won't lose the config when you reinstall to same folder.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Of course the problem was Secure Boot's new certificates. Install media created by the official Media Creation Tool is already signed with a valid certificate from Microsoft, so maybe that certificate isn't "up-to-date" enough for machines with the new ones installed in the UEFI. There's really no other logical explanation.
    • Here is how I fixed Windows 11 not booting after clean installation by Taras Buria Story time. A couple of weeks ago, I experienced a very odd thing with my computers. I was trying to reinstall Windows 11 on my primary device, and everything was going smoothly until the installer performed the first restart. After that, my computer entered the boot disk selection screen instead of continuing the setup process. Huh, that's odd, said I, and selected Windows Boot Manager only to see it fall back into the same screen right away. Then I tried booting from the USB drive with the same result—the PC kept returning to the boot device selection screen, and removing the drive would send my PC to UEFI, again, with no way to launch Windows 11. I fired up my spare laptop, which has been sitting unused for quite a while, to see if I am dealing with a defective USB drive. Nope, Windows 11 installed and started without issues. After trying another drive and checking all the possible settings in UEFI, I decided to try disabling Secure Boot. Lo and behold, Windows 11 started as it should have been in the first place, continued the setup process, and reached the initial setup screen. Victory! After I finished the setup and applied all updates, I re-enabled Secure Boot, and Windows 11 started without issues. Some time later, I tried reinstalling Windows 11 on my laptop only to experience similar issues, with UEFI claiming a Secure Boot violation. I checked whether the drive works on my main PC, and yes, it installed Windows 11 without errors. I scratched my head, went to UEFI, turned off Secure Boot, and installed Windows 11 without issues. After that, I enabled Secure Boot. Note: I used the official Media Creation Tool app for my USB drive. Also, UEFI was properly configured for Windows 11, including no Legacy Mode, a GPT-partitioned drive, and TPM and Secure Boot enabled. From my experience, if you are dealing with similar symptoms, I recommend two things: If you use old Windows 11 install media, create a new one with the latest Windows 11 release, especially if you know your PC already has the latest Secure Boot certificates. If you cannot create a new one, turn off Secure Boot, complete the installation, download all available updates, and then re-enable Secure Boot in UEFI. Note that you need to turn off Secure Boot after installing Windows 11. Otherwise, the installer won't run, claiming a hardware requirements mismatch. I believe the problem hides in Secure Boot certificates that expire this month. Microsoft is currently rolling out new certificates, and maybe a mismatch was causing these issues for both of my systems. I am out of my depth to make a definitive statement; this article is flagged as "Opinion," as I only share my experience and some tips on how to fix the problem. If some of you possess deeper knowledge and understanding of the situation, please share it in the comments. As for everyone else struggling with computers not booting after a clean install, the two steps above should get you out of the pickle.
    • I gave the tool a chance the other day to make a USB. An hour later it was stuck at 0% downloaded. I downloaded the official ISO, downloaded Rufus, and made the USB myself in 15 min.
    • <Moved to software discussion and support> I've got fond memories of Winamp. Changing the skins, the different visualisations etc. But now I just need a simple music player. MSN messenger would be another one, MSN Messenger Plus (I think?) offered so many different plugins. But again, it probably wouldn't work for me these days. And then there is miRC. i think it's still going these days, but lord i had fun with that back in the day. Now it's mostly stuff like Discord, WhatsApp group chats, Signal, Telegram... /me is showing his age...
  • Recent Achievements

    • Conversation Starter
      flexorcist earned a badge
      Conversation Starter
    • One Month Later
      AndreaB earned a badge
      One Month Later
    • One Month Later
      agatameier earned a badge
      One Month Later
    • Week One Done
      agatameier earned a badge
      Week One Done
    • Week One Done
      ssd21345 earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      518
    2. 2
      +Edouard
      198
    3. 3
      PsYcHoKiLLa
      147
    4. 4
      ATLien_0
      94
    5. 5
      Steven P.
      77
  • Tell a friend

    Love Neowin? Tell a friend!