FIrewall removing Outlook messages with attachments !

[Graham C]

Hi All,

Have had suspicions for several weeks now, hence I've just completed
an hour of testing e-mail with some very patient colleagues and have
proved.

1) I can send a Word attachment to myself and receive it.

2) If any one else sends a Word attachment I get absolutely nothing,
not even a warning that 'something possibly undesirable has been
removed'

3) A blank email sent at the same time arrives OK

4) Turned of Kerio firewall and repeated the tests - I can now receive
Word attachments.

Any ideas please - nothing found on Kerio site, and a general Google
produced nothing useful.

Running Outlook Express 6 and Kerio 2.1.5

Also running AVG 7.5 - that wasn't the problem


TIA

Graham

 

[Mr. Arnold]

Hi All,

Have had suspicions for several weeks now, hence I've just completed
an hour of testing e-mail with some very patient colleagues and have
proved.

1) I can send a Word attachment to myself and receive it.

2) If any one else sends a Word attachment I get absolutely nothing,
not even a warning that 'something possibly undesirable has been
removed'

3) A blank email sent at the same time arrives OK

4) Turned of Kerio firewall and repeated the tests - I can now receive
Word attachments.

Any ideas please - nothing found on Kerio site, and a general Google
produced nothing useful.

Running Outlook Express 6 and Kerio 2.1.5

Also running AVG 7.5 - that wasn't the problem

The obvious solution is to just get rid of Kerio and find something else.

 

[Beauregard T. Shagnasty]

2) If any one else sends a Word attachment I get absolutely nothing,
not even a warning that 'something possibly undesirable has been
removed'
<snip>
4) Turned of[f] Kerio firewall and repeated the tests - I can now
receive Word attachments.

Been ages since I've seen Kerio 2.1.5, but it is likely you have a
filter set regarding attachments to emails. I've got 4.5.916 on my
Windows box, and Word attachments (and all others) are received.

Graham, do you receive other attachments? .jpg .txt .zip ?
Have your sender rename the file to document.bleh or something to see if
it is specifically .doc files being blocked.

The obvious solution is to just get rid of Kerio and find something
else.

Or better yet, fix the options.

 

[Mr. Arnold]

2) If any one else sends a Word attachment I get absolutely nothing,
not even a warning that 'something possibly undesirable has been
removed'
<snip>
4) Turned of[f] Kerio firewall and repeated the tests - I can now
receive Word attachments.

Been ages since I've seen Kerio 2.1.5, but it is likely you have a
filter set regarding attachments to emails. I've got 4.5.916 on my
Windows box, and Word attachments (and all others) are received.

Graham, do you receive other attachments? .jpg .txt .zip ?
Have your sender rename the file to document.bleh or something to see if
it is specifically .doc files being blocked.

The obvious solution is to just get rid of Kerio and find something
else.

Or better yet, fix the options.

Some say yes and some say no.

 

[Beauregard T. Shagnasty]

Some say yes and some say no.

Potato, potahto...

Thing is, if Graham simply exchanges his Kerio for another software
firewall, he is liable to run into the same situation there. Best to
figure out how to set the one he has, wouldn't you agree?

 

[Mr. Arnold]

Potato, potahto...

Thing is, if Graham simply exchanges his Kerio for another software
firewall, he is liable to run into the same situation there. Best to
figure out how to set the one he has, wouldn't you agree?

Off the top of the bat, Kerio is not a FW. A machine level packet filter
possibly, but it's not a FW. So, we disagree right off the bat. ;-)

 

[Beauregard T. Shagnasty]

Off the top of the bat, Kerio is not a FW. A machine level packet
filter possibly, but it's not a FW. So, we disagree right off the
bat. ;-)

Ok... nevertheless, it still would be a good idea if Graham delved into
the program's options and fixed his problem (rather than disable it
altogether), and not have to learn any other technologies instead.
Unless he wants to play, of course.

 

[Graham C]

Thanks for the replies guys.

I used to use ZoneAlarm, but found it very heavy on system resources -
it grabbed about 60 Meg of memory - OK if you have a gig or two but I
haven't

Then I read lots of reviews and generally Kerio and Sygate came out
best - abd they only need a couple of meg to run.

Ran Sygate for a while but got sick of the pop ups telling me to
register it - which I couldn't as they no longer exist.

Hence I settled for Kerio - I've found it very complex and not
friendly at all.

Will have another delve at settings - but there's nothing obvious and
I am reasonably computer literate.

I suspect I may not be receiving any attachments at all. Will get a
mate to send some.

Thanks

Graham

 

[MoiMoi]

Hi All,

Have had suspicions for several weeks now, hence I've just completed
an hour of testing e-mail with some very patient colleagues and have
proved.

1) I can send a Word attachment to myself and receive it.

2) If any one else sends a Word attachment I get absolutely nothing,
not even a warning that 'something possibly undesirable has been
removed'

3) A blank email sent at the same time arrives OK

4) Turned of Kerio firewall and repeated the tests - I can now receive
Word attachments.

Any ideas please - nothing found on Kerio site, and a general Google
produced nothing useful.

Running Outlook Express 6 and Kerio 2.1.5

Also running AVG 7.5 - that wasn't the problem


TIA

Graham

A rather obvious question.
You don't have "do not allow attachments to be saved or opened..." in OE
Security Tab checked, do you?

MM

 

[Heather]

Hi MM.....I forgot about that OE thing....but nice try. IIRC, he would
receive a grayed out attachment, but would not be able to open it. And
he does say he gets attachments if he turns his Kerio firewall off.

I have never used Kerio, but wonder if he has something ticked off in
there that would prevent attachments downloading. Worth a thought.

Heather

 

[kurt wismer]

Mr. Arnold wrote:
[snip]

Off the top of the bat, Kerio is not a FW. A machine level packet filter
possibly, but it's not a FW. So, we disagree right off the bat. ;-)

oh, no... not that dead horse again...

 

[Duh_OZ]

On Tue, 23 Oct 2007 12:52:32 GMT, "Beauregard T. Shagnasty"


Thanks for the replies guys.

I used to use ZoneAlarm, but found it very heavy on system resources -
it grabbed about 60 Meg of memory - OK if you have a gig or two but I
haven't

Then I read lots of reviews and generally Kerio and Sygate came out
best - abd they only need a couple of meg to run.

Ran Sygate for a while but got sick of the pop ups telling me to
register it - which I couldn't as they no longer exist.

Hence I settled for Kerio - I've found it very complex and not
friendly at all.

Will have another delve at settings - but there's nothing obvious and
I am reasonably computer literate.

I suspect I may not be receiving any attachments at all. Will get a
mate to send some.

Thanks

Graham

===============
Have you tried Comodo? I've been running it on a machine (W2K) and
it seems to work fine. Unless things have changed it is free.

 

[Graham C]

===============
Have you tried Comodo? I've been running it on a machine (W2K) and
it seems to work fine. Unless things have changed it is free.

It looks good but I'm running 98SE at present, which won't handle it.
PIty.

XP is looking stable now - will upgrade very soon !

Graham

 

[Mr. Arnold]

Mr. Arnold wrote:
[snip]

Off the top of the bat, Kerio is not a FW. A machine level packet filter
possibly, but it's not a FW. So, we disagree right off the bat. ;-)

oh, no... not that dead horse again...

You seem to be standing still in your advancement in the understanding of FW
technology.

A firewall separates two networks the network it's protecting from usually
the Internet (a giant network) and the network it is protecting the LAN the
private network. A FW sits at the junction point between the two networks.
Whether it be a hardware device or a software solution running on a secured
host computer, a FW must have at least two network interfaces. One network
interface for the network it is protecting from and one network interface
for the network it's protecting. That would be two (NIC's) in the case of a
software FW solution running on a host computer.

The term firewall comes from the fact that by segmenting a network into
different physical subnetworks, they limited the damage that could spread
from one subnet to another just like firedoors or firewalls.


Kerio or PFW(s) are just a machine level packet filter.

No I didn't say that, I got nothing against packet filters as long as they
are acting as packet filters. If a personal FW or personal packet filter

Ah, at first a PFW should even get so far to become a usable packet filter
at all. Means:

- not being vulnerable to decade-old attacks (IP fragment reassembly...)
- not being vulnerable to trivial DoS conditions (SYN/FIN/ICMP/UDP flooding)
- providing access to TCP flags, packet filter states and Layer 7 states (if
it interprets such protocols) in the rules
- scriptability

 

[kurt wismer]

Mr. Arnold wrote:
[snip]

Off the top of the bat, Kerio is not a FW. A machine level packet
filter possibly, but it's not a FW. So, we disagree right off the
bat. ;-)

oh, no... not that dead horse again...

You seem to be standing still in your advancement in the understanding
of FW technology.

sorry, i'm not going to play this game with you again... you'll have to
find someone else to argue with over how many angels can dance on the
head of a pin...

 

[Graham C]

===============
Have you tried Comodo? I've been running it on a machine (W2K) and
it seems to work fine. Unless things have changed it is free.

It looks good but sadly won't do Win 98SE.

I may upgrade to XP now that it's just about stable !

Graham C

 

[Graham C]

Hi MM.....I forgot about that OE thing....but nice try. IIRC, he would
receive a grayed out attachment, but would not be able to open it. And
he does say he gets attachments if he turns his Kerio firewall off.

I have never used Kerio, but wonder if he has something ticked off in
there that would prevent attachments downloading. Worth a thought.

Heather

I had a filter set for OE in Kerio but it was for outgoing data only
and referred to UDP (whatever that is)

There sere a few filters set by default for general stuff, and the UDP
one should let stuff in on confirmation.

I then tried reinstalling Kerio from scratch and it now receives
attachments OK.

Compared the configs of the old and new and there was nothing
obviously different in the filter settings. Hence there must be
something lurking there that I don't understand.

Despite what reviewers have said, this is not an easy package to use,
so I will ditch it which is a shame because it looked good.

I will put Sygate back which is one of the few which runs on 98SE,
despite the slightly larger memory requirement.

I note that Kerio PERSONAL firewall is now owned by SUNBELT and
released as such and won't do 98SE.

Sygate was taken over by Symantec/Norton - and as many reviewers point
out, the good points of Sygate have clearly not found their way into
Norton.

Graham C

 

[Mr. Arnold]

Mr. Arnold wrote:
[snip]
Off the top of the bat, Kerio is not a FW. A machine level packet
filter possibly, but it's not a FW. So, we disagree right off the bat.
;-)

oh, no... not that dead horse again...

You seem to be standing still in your advancement in the understanding of
FW technology.

sorry, i'm not going to play this game with you again... you'll have to
find someone else to argue with over how many angels can dance on the head
of a pin...

It would seem to be a worthless endeavor to talk to you about anything, as
I would only be talking to a dead man walking. Now move on Kurt, walk on
down the road, find someone else to zombie and stop harassing me, trying to
start shit. You always got to lip service someone, when no one is in
conversation with you about anything in the first place.

But I know you're going to respond, because that's how you are as you like
to start shit between you and me, with your bored life. And my response will
be just to killfile you, as I am tired of your harassment like I have done
with that other racist lunatic that frequents this NG. I have never liked
you, and I don't want to see you in my face.

 

[James Egan]

On Sat, 27 Oct 2007 13:11:46 -0400, "Mr. Arnold" <MR.

It would seem to be a worthless endeavor to talk to you about anything, as
I would only be talking to a dead man walking. Now move on Kurt, walk on
down the road, find someone else to zombie and stop harassing me, trying to
start shit. You always got to lip service someone, when no one is in
conversation with you about anything in the first place.

But I know you're going to respond, because that's how you are as you like
to start shit between you and me, with your bored life. And my response will
be just to killfile you, as I am tired of your harassment like I have done
with that other racist lunatic that frequents this NG. I have never liked
you, and I don't want to see you in my face.

I enjoy a good laugh at your posts, D.

Keep taking the tablets...


Jim.

 

[Heather]

I had a filter set for OE in Kerio but it was for outgoing data only
and referred to UDP (whatever that is)

There sere a few filters set by default for general stuff, and the UDP
one should let stuff in on confirmation.

I then tried reinstalling Kerio from scratch and it now receives
attachments OK.

Compared the configs of the old and new and there was nothing
obviously different in the filter settings. Hence there must be
something lurking there that I don't understand.

Despite what reviewers have said, this is not an easy package to use,
so I will ditch it which is a shame because it looked good.

I will put Sygate back which is one of the few which runs on 98SE,
despite the slightly larger memory requirement.

I note that Kerio PERSONAL firewall is now owned by SUNBELT and
released as such and won't do 98SE.

Sygate was taken over by Symantec/Norton - and as many reviewers point
out, the good points of Sygate have clearly not found their way into
Norton.

Hi Graham.....I reread all that you had written and wondered if you knew
about the Old Version website where you can download older versions of
tons of programs which would suit your 98SE better.

http://www.oldversion.com/

Frankly I don't think there are too many trojans and/or malware items
out there that know that 98 still exists!! (VBG) But have a look at it
and perhaps use an older version of Zone Alarm. I had one of the 5.0
versions on this XP machine which I had used on WinME, for instance.
I put a newer Version 6 on here but didn't like it so have disabled it.
I will stick with the XP firewall for now.

I also have a router that I will hook up again......providing I can get
Shaggy to help me because that damned thing drives me nuts. It's a
wireless D-Link one, Shaggy. Had it for a year or two and it is
obviously built by men to be used by men. Nothing intuitive about it at
all, grin. I only hook it up when my daughter flies in with her Mac
Power Book. So I will need to get that done by mid December!!

Cheers........Heather