Trend Micro Internet

Questions:
Currently, we found a lot of errors from Trend Micro Interscan Messaging Security Suite (IMSS).
1. What are these errors about?

-----------------error#1----------------------
2009/05/23 00:15:50 GMT+08:00
Write socket FAIL!2009/05/23 00:15:50 GMT+08:00
D1B55AA6-934D-4BF7-AE5F-D8DD6AA7489E
ERROR: id, WRITE ERROR AT 2232
2009/05/23 00:15:50 GMT+08:00
D1B55AA6-934D-4BF7-AE5F-D8DD6AA7489E
>> .\r\n

2009/05/23 00:16:40 GMT+08:00
ERROR: Downstream server close the connection, the reason maybe excess downstream mail size limit or local disk is full.
2009/05/23 00:16:40 GMT+08:00
CA273A4C-5244-4507-9DF1-B6B030B495DA
ERROR: id, WRITE ERROR AT 1528
2009/05/23 00:16:40 GMT+08:00
CA273A4C-5244-4507-9DF1-B6B030B495DA
>> .\r\n

-----------------end error#1----------------------

2. Where can we configure the period of expiry for the email?
3. Does IMSS notify the user if the message has expired?

-----------------error#2----------------------
2009/05/23 00:24:39 GMT+08:00
f0208a7b-afa8-4e8f-b434-88fe441a1ee7
Push email into OK
2009/05/23 00:24:39 GMT+08:00
BAD MAIL FROM , Unable to deliver message to .
2009/05/23 00:24:39 GMT+08:00
ca273a4c-5244-4507-9df1-b6b030b495da
Push email into OK
2009/05/23 00:24:39 GMT+08:00
CA273A4C-5244-4507-9DF1-B6B030B495DA
ERROR: AF file expired

2009/05/23 00:24:39 GMT+08:00
CA273A4C-5244-4507-9DF1-B6B030B495DA
ERROR: ERROR DELIVERING MAIL - TIMESTAMP AND REASON HAS BEEN UPDATED IN AF FILE
2009/05/23 00:24:39 GMT+08:00
CA273A4C-5244-4507-9DF1-B6B030B495DA
ERROR: MDA finish, delivery fail since , spend <4299633> ms. eMail is deleted

-----------------end error#2----------------------

Answers:

1. The possible reasons for this issue are:
• Issues with the downstream server (e.g. filter settings for attachments)
• Insufficient space in the local hard drive where IMSS is installed
• Compatibility issues with the Gigabit Ethernet Network Interface Card (NIC)

The WRITE ERROR occurs because these required resources for writing data are not available. To resolve the issue, do either of these options:
• Modify the IsntSmtp.ini file
• If IMSS is installed in the local hard drive, make sure that 500 MB (minimum required free disk space) is available for mail storage
• Ensure compatibility if using a Gigabit Ethernet NIC

Modify the IsntSmtp.ini file:
a. Open the ..\IMSS\IsntSmtp.ini file.
b. Add the following parameter under the “[Delivery-Advanced]” section: "Transfer827=yes"
c. Save the changes.

Ensure compatibility if using a Gigabit Ethernet NIC:
a. Upgrade the NIC driver or downgrade to a 100 MBPS network card.
b. If using either a half-duplex or full duplex setting, change the switch from one setting to the other by configuring the port switch.

2. Where can we configure the period of expiry for the email?
==> You can configure it through:
a. IMSS console > Configuration > SMTP Routing > Delivery > Advance
b. Check 'Maximum retry period' value. This is the period of expiry for the mail.


3. Does IMSS notify the user if the message has expired?
==> By default, IMSS will send NDR notification to senders if the mail/s were not successfully sent.
You can check this settings also in \ISNTSmtp.ini:

Delivery-Advanced]
MaximumHopCount=15
MasqueradeDomain=
DisableReceivedHeader=no
DNSAuthoritativeBitCheck=no