Eset Mail Security Download
Cameron Cortez
There is a serious routing issue going on in South Africa due to undersea fiber break, for what it is worth - not sure if this could be causing such issues though. But the company seems to agree that these missing emails started before the fiber break. I suppose spf records and IP's could be affected by massive re-routing issues.
from your description it seems that the email has been marked as a spam because of it's content ("Rule system classified mail as SPAM"), despite the fact that it came from a trusted source ("IP (209.85.208.175) isn't found on cloud black list").
As for the blocked email. All I've been able to discern about the content via the report is that it had a PDF attachment and a few JPG's - likely a signature or something of the sort created the JPG's. It was a quotation an internal employee forwarded via their private gmail to some users in the company. I haven't seen the email itself though so I'm not sure what caused the block, but it's the only tangible example they have to confirm the suspicion of missing emails.
I just received an email notification with saying "During execution of Kernel on the computer [server name], the following event occurred: An error occurred during loading scanner modules. Malware protection will not work correctly."
Using the default Antispam rules, incoming emails are already being filtered on the mail server itself. This ensures that the attachment containing the malicious dropper will not be delivered to the mailbox of the end-user, and the ransomware is not able to execute.
After complaints about mails not arriving I have been looking at the greylisting logs to verify whats going on and found the mails concerned are being rejected. As several of the mails concerned have come from google I have experimented with adding gmail & googlemail domains to the approvedsenders file ( C:\Documents and Settings\All Users\Application Data\ESET\ESET Mail Security\ServerAntispam ).
When you want to whitelist servers from Greylisting, you need to do this by IP address (User's Guide Opens a new window, page 17). Greylisting doesn't allow whitelisting by domain. Therefore, you can't create an exception for a single e-mail address in Greylisting.
ESET Mail Security for Linux/FreeBSD offers lightweight yet powerful protection for heavy-duty mail servers based on the Unix platform. This product features ThreatSense, the industry's most accurate proactive technology for detecting all types of malware.
ESET Mail Security delivers both on-demand and on-access real-time protection from known and unknown viruses, worms, trojans, spyware and other internet threats. Included spam filter offers multiple, simultaneous filtering methods to provide effective detection and excellent protection. It also expands mail security coverage to include support for Novell GroupWise collaboration software, making it even easier for IT administrators to protect all Unix based mail services with one single product.
760c119bf3