Trend Micro V3 Issues
Wayne Kent
I appear to have two issues.
The first one I noticed is that Meeting Requests received from other domains
are stripped of the html coding, the buttons to accept or change the meeting
request are gone and the request is in plain text form. Meeting requests
sent internally are okay as are those sent to other domains that don't have
TMCSMS V3
The second is the SBS Performance Reports cannot be sent to external
domains. The report goes to the exchange queue where it remains for retry
after retry. From what I have observed the SMTP connection is made with the
receiving server but the message is not transmitted, the receiving server
closes the connection, times out waiting for the message to be sent.
Forwarding the report works.
I have a call into Trend Micro regarding the first issue. I just became
aware of the second issue yesterday,
As always any information would be greatly appreciated.
Wayne
Jenny wu [MSFT]
Thanks for using the SBS newsgroup!
I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!
For time critical issues (not business down), we encourage you to contact
CSS directly for more immediate assistance:
International Support (non-US/Canada):
http://support.microsoft.com/common/international.aspx
US and Canada:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone
To continue working with me in the newsgroups, please see the following:
For your description, I understand that after upgraded to Trend Micro CSMS
for SMB V3, the issue to be:
1. Meeting Requests received from other domains are stripped of the html
coding, the buttons to accept or change the meeting request are gone and
the request is in plain text form.
2. SBS Performance Reports cannot be sent to external domains.
If I am off base, please don't hesitate to let me know.
From your symptom, the issues should be caused by Trend Micro filter. I
would like to suggest you contact Trend Micro for support. Since this
product is designed by Trend Micro, I believe their support service is much
more qualified to handle this issue. You can contact them to see if they
can provide any valid information on this issue. You can contact them via:
http://kb.trendmicro.com/solutions/default.asp?cType=1&prodID=0&versionID=0
To the second issue, I suggest you perform the following tests to isolate
the issue:
1. Please disable the SMTP filters to test, tell me the result. To do it:
Open Exchange System Manager. Navigate to
Servers\ServerName\Protocols\SMTP\Default SMTP Virtual Server. Right-click
it and choose 'Properties'. Click 'Advanced' button and then 'Edit' the
identity. If there is any filter feature enabled, please disable any
filtering feature. Restart the SMTP virtual server.
2. Have you installed ISA on the SBS server box? If yes, please check the
filters you configured and try to disable them to test.
3. Please enable the Message Tracking logs to trace the performance report
mails to find the issue clue.
To do that, please perform the steps in the following KB articles:
823864 Improved Message Tracking Features in Exchange Server 2003
http://support.microsoft.com/?id=823864
821910 How to troubleshoot for Exchange Server 2003 transport issues
http://support.microsoft.com/?id=821910
I appreciate your time. I am happy to be assistance of you and look forward
to your reply!
Have a nice day!
Sincerely,
Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>From: "Wayne Kent" <wkent at netsandbytes dot com>
>Subject: Trend Micro V3 Issues
>Date: Thu, 1 Dec 2005 07:21:58 -0900
>Lines: 23
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>Message-ID: <utedbNp9...@tk2msftngp13.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: 146-1-178-69.gci.net 69.178.1.146
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:227024
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Wayne Kent
Thank you for your response.
I did as you suggested, disabled the SMTP filters and tried to sent the
report. ISA is not installed on the server.
The result is the same, the message never leaves the queue and retries time
after time.
I am going to contact Trend Micro regarding this issue.
Thank you so much for your interest. If you have any other suggestions I
would be glad to hear from you.
Sincerely
Wayne
""Jenny wu [MSFT]"" <v-ya...@online.microsoft.com> wrote in message
news:J$IpIBV%23FH...@TK2MSFTNGXA02.phx.gbl...
slick...@yahoo.com
SMTP queues were stuck and external mail was not being delivered. Some
that did get through was a few hours late. We do not use the POP3
connector. We use full SMTP in and out. This was a nightmare. We
uninstalled TrendSMB v3 and reinstalled v2, but that didn't help. You
can't rollback Exchange SP2, we finally called MS and paid $250. There
solution, which worked is listed below. I would really like to be able
to reinstall TrendSMB v3, but I am nervous it will bomb again. Please
share your experiences. I believe we found that some of the outgoing
emails were being modified and the format was malformed or something.
What I did to break my SMTP Mail Queue:
1. Service Pack 1 for the Windows Server® 2003 operating system
(Already was installed)
2. Windows SharePoint® Services 2.0 Service Pack 1 (installed today)
3. Exchange Server 2003 Service Pack 1 (was already installed)
4. Windows XP SP2 for Client Deployment (installed today)
5. Windows Small Business Server 2003 SP1 (installed today)
6. Exchange Server 2003 Service Pack 2 (installed last today)
7. Installed TrendSMB v3 Update
What MS did to solve my problem
1. Changed the SERVICE Microsoft Exchange MTA Stacks to Startup Type:
AUTOMATIC and started the service since it was stopped
2. In Server Management a new SMTP Virtual Server was created and give
the exact same properties as the existing SMTP virtual server. The new
Virtual Server name is Test
3. Stopped the original SMTP Virtual Server
Jenny wu [MSFT]
Thanks for your update. I appreciate your understanding for the issue.
Through tests, we may isolate the issue in the SMB V3 side. Have you
enabled Message Tracking to monitor outbound mails? Where you find outbound
mails are dropped?
For different Anti-spam application has different filter engine to scan
mails. I am sorry for that I am not familiar with Trend Micro's
applications and It is should be the best way that you contact Trend Micro
for support.
Also it should be appreciated that you will share knowledge with us if you
resolved the issue and post the solution here-).
I am happy to be assistance of you!
Have a nice day!
Sincerely,
--------------------
>From: slick...@yahoo.com
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: Trend Micro V3 Issues
>Date: 5 Dec 2005 16:09:17 -0800
>Organization: http://groups.google.com
>Lines: 31
>Message-ID: <1133827757....@f14g2000cwb.googlegroups.com>
>References: <utedbNp9...@tk2msftngp13.phx.gbl>
> <J$IpIBV#FHA...@TK2MSFTNGXA02.phx.gbl>
> <#ePCmcc#FHA....@TK2MSFTNGP15.phx.gbl>
>NNTP-Posting-Host: 207.230.12.32
>Mime-Version: 1.0
>Content-Type: text/plain; charset="iso-8859-1"
>Content-Transfer-Encoding: quoted-printable
>X-Trace: posting.google.com 1133827762 21570 127.0.0.1 (6 Dec 2005
00:09:22 GMT)
>X-Complaints-To: groups...@google.com
>NNTP-Posting-Date: Tue, 6 Dec 2005 00:09:22 +0000 (UTC)
>In-Reply-To: <#ePCmcc#FHA....@TK2MSFTNGP15.phx.gbl>
>User-Agent: G2/0.2
>X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;
.NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
>Complaints-To: groups...@google.com
>Injection-Info: f14g2000cwb.googlegroups.com; posting-host=207.230.12.32;
> posting-account=olNKrA0AAAB6vwAY-4GWdKxupPXechmt
>Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!f14g2000cwb.googlegroups.com!not-fo
r-mail
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:227917
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Jenny wu [MSFT]
Thanks for your update by mail.
From the message tracking log image, the outbound mails have been saved in
outbound queue and ready to send out. They have been through the SMTP
filters.
What is more, for the image, I found that one of the mail recipient is
wk...@nb.local, I guess the mail address is invalid, did you got NDR mail.
Please clear the outbound queue of Exchange and then try to test the issue,
do you get NDR?
Sincerely,
--------------------
>X-Tomcat-ID: 70489786
>References: <utedbNp9...@tk2msftngp13.phx.gbl>
<1133827757....@f14g2000cwb.googlegroups.com>
>MIME-Version: 1.0
>Content-Type: text/plain
>Content-Transfer-Encoding: 7bit
>From: v-ya...@online.microsoft.com ("Jenny wu [MSFT]")
>Organization: Microsoft
>Date: Tue, 06 Dec 2005 03:40:40 GMT
>Subject: Re: Trend Micro V3 Issues
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>Message-ID: <tuRYZbh#FHA....@TK2MSFTNGXA02.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>Lines: 130
>Path: TK2MSFTNGXA02.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:227982
>NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122
Wayne Kent
The mail recipient you referred to is a local one on the domain and receives
the report just fine. The email to the external recipient is the one that is
stuck in the outbound queue and never gets sent. All other mail seems to be
processed without incident.
I should mention that Exchange Service Pack 2 was installed at the same time
as the update to Trend Micro.
If the messages have already passed the SMTP filters why would they remain
in the outbound queue, and why would the reports be affected in this
manner??
Wayne
""Jenny wu [MSFT]"" <v-ya...@online.microsoft.com> wrote in message
news:5PwnHBk%23FHA...@TK2MSFTNGXA02.phx.gbl...
Jenny wu [MSFT]
Thanks for you update!
You can disable all SMTP filters and run the following command to test the
communication between your server and external SMTP server.
"telnet <mail.contoso.com ><25>" (without the quotation marks)
Note: You can replace <servername> with the IP address or the FQDN of the
SMTP server that you want to connect to.
For detail information, you can refer to the following KB articles:
838049 HOWTO: Telnet to Port 25 to Test SMTP Communication
http://support.microsoft.com/?id=838049
153119 XFOR: Telnet to Port 25 to Test SMTP Communication
http://support.microsoft.com/?id=153119
To further trouble shoot the issue, we need totally remove the SMB V3
application to isolate the issue. I appreciate your time!
Have a nice day!
Sincerely,
--------------------
>From: "Wayne Kent" <wkent at netsandbytes dot com>
>References: <utedbNp9...@tk2msftngp13.phx.gbl>
<1133827757....@f14g2000cwb.googlegroups.com>
<tuRYZbh#FHA....@TK2MSFTNGXA02.phx.gbl>
<5PwnHBk#FHA....@TK2MSFTNGXA02.phx.gbl>
>Subject: Re: Trend Micro V3 Issues
>Date: Tue, 6 Dec 2005 04:46:51 -0900
>Lines: 206
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>X-RFC2646: Format=Flowed; Original
>Message-ID: <OEJMEum#FHA....@TK2MSFTNGP11.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: 146-1-178-69.gci.net 69.178.1.146
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:228088
>X-Tomcat-NG: microsoft.public.windows.server.sbs
Wayne Kent
I uninstalled Trend Micro and run the tests.
I was able to receive a Meeting Request. It was intact and in the proper
form.
I was able to send a performance report to an external domain. In fact by
the time I opened ESM to view the queues the report had already been sent.
I will pursue these issues with Trend Micro. When there is a resolution I
will post back to the newsgroup.
Thank you so much for your assistance.
Have a great day.
Sincerely,
Wayne
""Jenny wu [MSFT]"" <v-ya...@online.microsoft.com> wrote in message
news:6EIzEMt%23FHA...@TK2MSFTNGXA02.phx.gbl...
Les Connor [SBS Community Member - SBS MVP]
Did you have any content filtering rules enabled, specifically 'Block HTMS
script messages - or attachment blocking enabled?
I've not seen any issues with meeting requests or the reports on CSM 3.
--
Les Connor [SBS Community Member - SBS MVP]
-----------------------------------------------------------
SBS Rocks !
----------------------
"Tell me and I'll forget. Show me and I'll remember. Involve me and I'll
understand." - Confucius
"Wayne Kent" <wkent at netsandbytes dot com> wrote in message
news:eF8dDT1%23FHA...@TK2MSFTNGP10.phx.gbl...
Jenny wu [MSFT]
Thanks for your update! I am happy to know that you find the issue root
cause. I appreciate your time and efforts to the issue.
It is appreciated that if you will share your solution later in the
newsgroup!
Have a nice day!
Sincerely,
--------------------
>From: "Les Connor [SBS Community Member - SBS MVP]"
<les.c...@DEL.cfive.ca>
>References: <utedbNp9...@tk2msftngp13.phx.gbl>
<1133827757....@f14g2000cwb.googlegroups.com>
<tuRYZbh#FHA....@TK2MSFTNGXA02.phx.gbl>
<5PwnHBk#FHA....@TK2MSFTNGXA02.phx.gbl>
<OEJMEum#FHA....@TK2MSFTNGP11.phx.gbl>
<6EIzEMt#FHA....@TK2MSFTNGXA02.phx.gbl>
<eF8dDT1#FHA....@TK2MSFTNGP10.phx.gbl>
>Subject: Re: Trend Micro V3 Issues
>Date: Wed, 7 Dec 2005 13:12:30 -0600
>Lines: 358
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
>X-RFC2646: Format=Flowed; Response
>Message-ID: <#0qmwI2#FHA....@TK2MSFTNGP14.phx.gbl>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: 206-45-126-101.static.mts.net 206.45.126.101
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:228465
>X-Tomcat-NG: microsoft.public.windows.server.sbs
slick...@yahoo.com
Have you isolated the issues?
Ryan
GR8PCDR
Ext. Email Address" with Trend Micro v3 installed?
I have experienced "exactly" the same issues and have found very little
information on this topic to assist me with a "fix".
Your input based upon your experience would be appreciated.
Thank you.
JR
Wayne Kent
I am still waiting on Trend Micro to provide assistance with this issue. The
engineer that was working on this case asked for debugging logs to be sent,
when I did they indicated that the issue was being escalated to a higher
tier. I am still waiting.
Attachment blocking and content filtering are not enabled. Trend Micro is
installed in "default" configuration. The only things I modified was the
port, I always use 8085, and added to the "Allowed Senders"
Wayne
"GR8PCDR" <GR8...@discussions.microsoft.com> wrote in message
news:DD13C5FF-2F61-43D5...@microsoft.com...
bj
We had a similar issue on Exchange 2003 SP1 using Trend Micro's CSM
Suite v3. Basically, outbound messages in the queues for yahoo.com,
aol.com, and cs.com were hanging - a message would get to the stage
where the remote SMTP server would ask for the body of the message (an
SMTP code 354) and our SMTP server would not send the body. This would
keep the status of the queues active, and never send the mail...so
messages would stay in the queue.
Turns out there's a Trend hotfix for this issue - I wonder if it would
help in your case. It related to MIME encoding, where the Anti-Spam
portion of the Messaging Security Agent would corrupt the encoding. If
you call their support line you can get it from them.
Since we've applied the hotfix (which replaces a file called tmmsg.dll)
queues have been working fine.
HTH.
BJ
Wayne Kent
Thanks for the heads up. I had just received the hotfix from Trend Micro. It
had been available since December 1
For others who may have this issue you need; Client Server Messaging
Security 3.0 - Messaging Security Agent Hot Fix - Build 1157
The zip file is; Smex_7.2_11571.zip
Which includes; csm_30_smex_72_win_en_hfb1157.exe
Which fixes: "This hot fix corrects an issue that some MIME formats could
cause
Message Module(TMMSG) to convert the original SMTP message into
a wrong format. Converting the SMTP message into the wrong format
might cause Outlook Express to time out when retrieving email
messages using the POP3 protocol."
Applies to SMTP too. Once the hotfix was applied SBS2003 Performance reports
go straight out and Meeting Requests arrive intact.
Thanks to all those who responded and I hope this will help someone else.
Wayne
"bj" <bj.wa...@gmail.com> wrote in message
news:1134583739....@z14g2000cwz.googlegroups.com...