Vlada's Blog - All Comments

re: KERBEROS error 4 (Part II)

Anonymous — Sat, 31 Oct 2009 20:21:14 GMT

That totally worked, was easy enough to do and understand, and you *completely* saved my ass!

THANK YOU!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

re: Exchange 2007 ‘Sender Reputation Filter’ Story

Peter Ridgway-Davies — Tue, 29 Sep 2009 17:00:32 GMT

advise not sell <vbg>

FWIW we are using Forefront on our systems with an edge server and Exchange 2007.

It works really well and the antivirus is so quiet I worry it may not be working (but it is). Anti-spam is good too.

re: Outlook 2007 and Default Gateway problem

PeterL — Thu, 06 Aug 2009 11:37:58 GMT

Hello,

# George Simos said on May 28, 2009 6:16 PM:

Hello,

Despite that this is great info, I really don't understand why not having default gw at client machines?

Probaly because of Proxy Server.

Fix works.

Took me some time to solve this problem since im using a ISA server to proxy i thought the fault would be in there.

.PDF bestanden openen in OWA | hilpers

.PDF bestanden openen in OWA | hilpers — Tue, 23 Jun 2009 20:02:11 GMT

Pingback from .PDF bestanden openen in OWA | hilpers

re: Outlook 2007 and Default Gateway problem

KrisBelucci — Tue, 02 Jun 2009 17:08:13 GMT

I really liked this post. Can I copy it to my site? Thank you in advance.

re: Outlook 2007 and Default Gateway problem

KeHoeff — Thu, 28 May 2009 20:07:17 GMT

hey this is a very interesting article!

re: Outlook 2007 and Default Gateway problem

George Simos — Thu, 28 May 2009 16:16:57 GMT

Hello,

Despite that this is great info, I really don't understand why not having default gw at client machines?

If it is a security concern would you like to ellaborate a little bit on the issue please?

Thank you,

re: OWA and PDF attachment problem

Vlada.Ilic — Fri, 08 May 2009 08:44:39 GMT

Well, not exactly "any" type of attachment, there are still a lot of file types defined under Level1FileTypes and Level2FileTypes that will be blocked by default.

As far as I remember, "application/octet-stream" means a binary file of unknown type to the web server.

Anyway, one should always have some AV protection for Exchange (in this case it was "Sophos PureMessage for MS Exchange"), and not rely on users judgment.

re: OWA and PDF attachment problem

DKS — Thu, 07 May 2009 14:15:16 GMT

By removing "application/octetstream" from the Level2mime type might serve your requirement but its a bigger threat to your org as it will allow users to open any type of attachment in owa, it can be virus also...So think before doing that!!!!!!

re: OWA and PDF attachment problem

Ryan — Wed, 08 Apr 2009 20:22:48 GMT

you the mannnnn

re: OWA and PDF attachment problem

Jim — Wed, 11 Mar 2009 16:02:21 GMT

This was it. Great post.

re: Exchange 2007 ‘Sender Reputation Filter’ Story

Vlada.Ilic — Tue, 23 Dec 2008 18:05:24 GMT

Thanks for the neat solution....:)

Considering GFI:

This is one of the clients who don't beleive in sentence "There is no stronger antispam and antivirus protection than Exchange2007 + Forefront". I guess that is one of the reason why GFI and many other companies are still existing on the market by selling their own solutions for Exchange (and to be honest...they have some very nice features which are not available in both Forefront and built-in AntiSpam Exchange engine).

p.s Working as a technical consultant my job is to advice, not to persuade clients...;)

re: Exchange 2007 ‘Sender Reputation Filter’ Story

Christian Haberl — Tue, 23 Dec 2008 02:09:48 GMT

The correct thing to do would have been to define the ISA and the IIS/Gateway as an Internal Server with the Set-TransportConfig -InternalSMTPServers x.x.x.x,y.y.y.y command.

That way you can leave the Sender Reputation filter and it has another very important reason: The Connection Filter, which uses, among other things, the IP Block List Provider feature (DNSBL) will not think that the message came into the Exchange organization from 172.16.0.1 but will look at the server before that in the mail headers (EnteredOrgFromIP). on another note: Personally I would have dumped GFI since the customer has both forefront and the enterprise cal - there is no stronger antispam and antivirus protection than exchange2007 + forefront. Microsoft protects their whole email infrastructure with nothing else: www.microsoft.com/.../edgetransport.mspx

re: OWA and PDF attachment problem

Vlada.Ilic — Mon, 29 Sep 2008 16:43:58 GMT

As I mentioned in the intro it was SBS....I am not sure, but I guess that this registry hack should be done on front-end server, if you have front-back end exchange scenario.

p.s sorry for delay, I have just returned from vacation...;)

re: OWA and PDF attachment problem

Campbell Knudson — Tue, 16 Sep 2008 13:41:55 GMT

This is to be done on the OWA server? Mail server?