Messaging Gateway

Hi All,

I use Symantec Brightmail Gateway 8.0.2 in standalone mode.

I get several warning and error message as below :

2009-07-15T12:16:10+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247634936.xmit.

2009-07-15T12:16:10+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009-07-15T11:55:36+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247633698.xmit.

2009-07-15T11:55:36+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009-07-15T11:34:58+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247632465.xmit.

2009-07-15T11:34:58+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009 Jul 15 11:32:41 ICT (warning) ecelerity: [7982] smsrouting: purging domain #sms#00000034

2009 Jul 15 11:31:33 ICT (warning) ecelerity: [7982] smsrouting: purging domain #sms#00000034

2009-07-15T08:53:36+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247622780.xmit.

2009-07-15T08:53:36+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009-07-15T06:52:46+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247615532.xmit.

2009-07-15T06:52:46+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009 Jul 14 20:26:55 ICT (warning) ecelerity: [14195] smsrouting: purging domain #sms#00000496

2009-07-14T19:31:53+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247574678.xmit.

2009-07-14T19:31:53+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009-07-14T18:51:15+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247572242.xmit.

2009-07-14T18:51:15+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009-07-14T18:10:36+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247569795.xmit.

2009-07-14T18:10:36+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009 Jul 14 18:10:34 ICT (warning) ecelerity: [14195] smsrouting: purging domain #sms#00000508

2009 Jul 14 18:09:32 ICT (warning) ecelerity: [14195] smsrouting: purging domain #sms#00000508
2009 Jul 14 18:08:14 ICT (warning) ecelerity: [14195] smsrouting: purging domain #sms#000004f9
2009 Jul 14 18:07:11 ICT (warning) ecelerity: [14195] smsrouting: purging domain #sms#000004f9

2009-07-14T17:29:52+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247567358.xmit.

2009-07-14T17:29:52+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009-07-14T16:28:51+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247563697.xmit.

2009-07-14T16:28:51+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009-07-14T15:48:11+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247561255.xmit.

2009-07-14T15:48:11+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.
2009-07-14T13:46:06+07:00 (WARNING:2216.3071854272): [12244] Error while trying to send file reporter.2216.1247553930.xmit.

2009-07-14T13:46:06+07:00 (ERROR:2216.3071854272): [12034] Network error occurred, Empty reply from server (52), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.

Any idea what it is ? and how to solve it ?

Thanks in advance,

Hi,

make sure the scanners are allowed and can connect to the Brightmail rule servers through TCP port 443 (HTTPS).
Are your rules being updated correctly?

Federico

Hi fferaboli,

I found about what you saying in Symantec knowledge base also.

But what exactly the "rule servers" is ?

My Brightmail gateway is implemented in standalone mode. Does "rule server" run in the same appliance or run in remote server ?

How can I test if my appliance can connect to "rule servers" or not ?

Anyways, above logs are showing in last several days. But no Brightmail configuration or firewall configuration were modified for months.

Thank you :)

Hi,

your Symantec Brightmail Gateway connects to Symantec servers located in the Internet to download antispam rules and upload statistics.
You need to make sure the product is able to connect to those servers and, in order to do that proper network configuration is required.
The SBG installation guide covers that topic in detail. Find a copy of that document here:
ftp.entsupport.symantec.com/pub/support/documentation/sbg_installation_guide.pdf

To test you can login to the scanner via SSH and telnet the rule server on port 443 like this:

hostname> telnet aztec.brightmail.com 443

The command return should be similar to this:

Trying 216.250.24.64...
Connected to aztec.brightmail.com.
Escape character is '^]'.

That means the connection was successful on that port. If your antispam rules do not update for more than 4 hours please open a case with Technical Support

More information about rules updates can be found here:
http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2009052813305654

Regards,

Federico

Hi fferaboli,

Actually there is no need to concern on anti-spam because this appliance was use to sending out only.

Anyways, I will check ssl connection between brightmail gateway and aztec.brightmail.com as your recommendation.

Thank you !