Messaging Gateway

 View Only
  • 1.  SMG 9.5.3-3 Bounce attack prevention - VMware app.

    Posted Jan 23, 2012 12:20 PM

    Hi all,
    SMG 9.5.3-3 Bounce attack prevention - VMware appliance.

    I had to switch off (uncheck) in SPAM policies, because a lot of servers don't accept the added tag, if its verify the user(s).

    I would like to ask you, where is stored exactly the tag in the message and the name of this tag? I mean technicaly. I didn't find any more detailed technical explaining on Symantec WEB. If I view the source code (property) in Outlook express I see nothing. I don't know, what should I find. Or is it only added at the beginning initial dialog? "MAIL From:" ??? What is the proper syntax?

    Thanx for your advices.
    Pavel



  • 2.  RE: SMG 9.5.3-3 Bounce attack prevention - VMware app.

    Broadcom Employee
    Posted Jan 23, 2012 04:17 PM

    The string is generated from the seed that is provided under Administration -> Control Center -> Certificates.



  • 3.  RE: SMG 9.5.3-3 Bounce attack prevention - VMware app.

    Posted Jan 24, 2012 06:55 AM

    Hi TSE-JDavis

    Thanx. I know that, I know set it.

    But I ment where is inserted the tag in the dialog between SMTP?

    Single/Easy SMTP dialog looks like this:

    220
    EHLO domain0.xx
    250
    MAIL FROM: <user0@domain0.xx>
    250
    RCPT TO: <user1@domain1.xx>
    250
    RCPT TO: <user2@domain1.xx>
    250
    DATA
    354
    .
    250
    QUIT
    221

    I asked, how is modified similar dialog, or if the tag is in the form "X-blabla" in the header (I didn't see any visible changes in header). I don't know the technical solution. (I don't have problem with setting.....). For me it is very difficult to discover and test settings on production system 365x7x24.

    Thanx.

    PaJi



  • 4.  RE: SMG 9.5.3-3 Bounce attack prevention - VMware app.

    Posted Jan 24, 2012 09:30 AM

    Hi,

    the feature rewrites the outbound mail from (envelope) address. 

    Is that the information you are looking for?

    Regards,

    Federico



  • 5.  RE: SMG 9.5.3-3 Bounce attack prevention - VMware app.

    Posted Jan 24, 2012 11:13 AM

    Hi Federico,

    yes, but how looks the new information?

    Standard is:

    MAIL FROM:<user@domain.com>

    How looks the new edited line? Sure we are talking about the envelope, not header....

    Thanx

    PaJi



  • 6.  RE: SMG 9.5.3-3 Bounce attack prevention - VMware app.
    Best Answer

    Posted Jan 24, 2012 11:27 AM

    Hi,

    is pretty much as described here:

    http://en.wikipedia.org/wiki/Bounce_Address_Tag_Validation

    "mailbox@example.com with prvs=tag-value=mailbox@example.com, where prvs, called "Simple Private Signature""

     

    HTH,

    Federico



  • 7.  RE: SMG 9.5.3-3 Bounce attack prevention - VMware app.

    Posted Jan 24, 2012 02:46 PM

    Thank you very much to all.

    PaJi