<div>
we do have a SOnicwall 2040 Pro, is that possible with it?<br />
<br />

</div>


<div>
Yes. <br />
<br />
You would first have to log into the SonicWall interface. <br />
<br />
Then you would create a new object (in the firewall area) called (for example) Clients. The address range of the clients would be all IPs of your client machines.<br />
<br />
Then you would create a new rule below the default rule that denies outbound communication for service SMTP for the group you created above. This will stop anything in that group from sending out data on port 25.<br />
<br />
To test this after you implement it you can open a command prompt from the mail server and enter &quot;telnet mail.cnn.com 25&quot; and it should connect and give you some output on the screen. Then you should go to one of the clients and do the same and it should not connect.<br />
<br />
If this is not clear (since I don't have a SW in front of me) I would recommend contact SW tech support (if you have a current service agreement) they are very helpful in my experience.
</div>


<div>
That's probably as good a place as any to start. &nbsp;If you are NATting to a single public IP address and don't restrict port 25 outbound to only the GWIA server, a stray virus / trojan / spambot can make it look to the outside world as though you've got an open relay.<br />
<br />
Although mail-borne malware in an all-GroupWise environment is rare, email isn't the only vector for malware that use email protocols for propagation, and certainly not the only vector for spambots.<br />
<br />
Definitely lock down your firewall as recommended. &nbsp;You may want to bring someone in (or maybe your GW guy can do this too) to scan your network for computers trying to send on port 25 to help clean up the source of your problem...<br />
<br />
You can't &quot;open a command prompt from the mail server&quot; in this case, because it's GroupWise running on NetWare. &nbsp;NetWare 6.0 SP5 doesn't have a &quot;command prompt&quot; unless you're running the admin toolkit, and even then, it's not likely to have a telnet tool.<br />

</div>


<div>
Shows you how much I know about Net.... what is it? =]
</div>


<div>
I found a PC that had major viruses, and the Win XP 2008/2009 popups, viruses....<br />
Im just formatting this PC<br />
and I did create the firewall rules with SOnicwall's help - and tried the telnetting cmd, and results are as what were posted above - times out cannot complete connection<br />
so I hope that solves it, will find out shortly<br />
<br />
<br />

</div>


<div>
Yep, not like I need to re-iterate, but the telnet trick is a nice one that (as unbelievable as it sounds) plenty of engineers simply don't know about or understand. &nbsp;I'm always puzzled by that, but yeah, so long as machines can't telnet to port 25 on their own, great start.<br />
<br />
Can I ask an unrelated question? &nbsp;Why SP6 and not 7 for your GroupWise server?<br />
<br />
Also, make sure to utilize that SonicWall to your advantage in the future...but it's mostly a comment for the Enhanced OS - don't use the standard one that much, but you can look at the real-time interface and see what machine(s) are trying to spew out traffic on port 25 and grab their IP's, translate the name via DNS, or look it up on your DHCP server, assuming you're running one...then take care of those offenders immediately. &nbsp;I've done that plenty of times for people with 2040's.<br />

</div>


<div>
Thanks Ghost96 -- reason GrpWIse on 6 and not 7 is lazyness by client here...and when they ran into issues, I called Novell and the support has ended for Grpwise 6. &nbsp;So NOW they are forced to move to GW7\<br />
<br />
Can you check out my log of the firewall we do run Sonic OS Std its latest f/w<br />
see entry 25 172.25.0.120 and its TX bytes and RX Bytes the value is really high compared to the rest.....<br />
could this be anything to worry about? &nbsp;maybe this PC is as well sending out tons of spam???<br />
<br />
<br />
<br />
Active Connections Monitor Items &nbsp;to 50 (of 88) &nbsp; &nbsp;<br />
&nbsp;<br />
&nbsp;<br />
&nbsp;<br />
&nbsp;<br />
<br />
&nbsp;# Source IP &nbsp;Source Port &nbsp;Destination IP &nbsp;Destination Port &nbsp;Protocol &nbsp;Src Interface &nbsp;Dst Interface &nbsp;Tx Bytes &nbsp;Rx Bytes &nbsp;<br />
1 172.25.0.10 1196 199.166.4.2 53 UDP LAN WAN 126 147 <br />
2 172.25.0.10 1193 216.254.141.3 53 UDP LAN WAN 73 148 <br />
3 172.25.0.10 1204 216.254.141.3 53 UDP LAN WAN 70 147 <br />
4 172.25.0.10 1213 216.254.141.3 53 UDP LAN WAN 73 175 <br />
5 172.25.0.10 1205 216.254.141.3 53 UDP LAN WAN 70 147 <br />
6 172.25.0.10 1205 199.166.4.2 53 UDP LAN WAN 70 147 <br />
7 172.25.0.10 1211 216.254.141.3 53 UDP LAN WAN 71 204 <br />
8 172.25.0.10 1203 216.254.141.3 53 UDP LAN WAN 70 147 <br />
9 172.25.0.10 1203 199.166.4.2 53 UDP LAN WAN 70 147 <br />
10 172.25.0.10 1204 199.166.4.2 53 UDP LAN WAN 70 147 <br />
11 172.25.0.10 1200 216.254.141.3 53 UDP LAN WAN 62 150 <br />
12 172.25.0.10 1201 216.254.141.3 53 UDP LAN WAN 57 166 <br />
13 172.25.0.10 1199 216.254.141.3 53 UDP LAN WAN 57 166 <br />
14 172.25.0.10 1196 216.254.141.3 53 UDP LAN WAN 70 147 <br />
15 172.25.0.10 1212 216.254.141.3 53 UDP LAN WAN 73 255 <br />
16 172.25.0.103 1099 72.14.205.104 80 TCP LAN WAN 763 594 <br />
17 172.25.0.103 137 172.25.255.255 137 UDP LAN (null) 78 0 <br />
18 172.25.0.103 137 172.25.255.255 137 UDP LAN (null) 78 0 <br />
19 172.25.0.103 65497 199.166.4.2 53 UDP LAN WAN 60 256 <br />
20 172.25.0.103 137 172.25.255.255 137 UDP LAN (null) 78 0 <br />
21 172.25.0.103 137 172.25.255.255 137 UDP LAN (null) 78 0 <br />
22 172.25.0.103 137 172.25.255.255 137 UDP LAN (null) 78 0 <br />
23 172.25.0.103 137 172.25.255.255 137 UDP LAN (null) 78 0 <br />
24 172.25.0.116 1365 207.46.108.18 80 TCP LAN WAN 132646 119931 <br />
25 172.25.0.120 1219 72.246.31.92 554 TCP LAN WAN 3168752 150064418 <br />

</div>


<div>
I meant why go to SP6 for GroupWise 6.5 instead of going to SP7 for GroupWise 6.5. ;)<br />
<br />
But yeah, 7 would be nice but it'll be a bit more work instead of just applying a SP. &nbsp;I was just offering, I'd be looking at having an Engineer apply 7, not 6. &nbsp;To apply 6 while paying an Engineer doesn't make as much sense to me.<br />
<br />
It's worth checking out clients that have unusually high amounts of traffic being sent/received. &nbsp;You can always netstat them and see what they are doing and what connections they have open.<br />
<br />
The bottom entry looks like some kind of streaming server, or a place where they're housing videos.<br />
<br />
The second one from the bottom looks like it's for the MSN Messenger application and could be used for people transferring files back and forth. &nbsp;Either way, I'd ban them both, but I don't allow that garbage in my networks so that's just my opinion :D<br />

</div>


<div>
<div class="content wysiwyg-content">
HI I have a GroupWIse 6.5.4 on Netware 6.0sp5<br />
Past week my email domain user@abc.com has become blacklisted, I have requested removal from the 4 sites, and 3 were removed, the 4th said it will take 1 week.<br />
But I checked again today and my IP was blacklisted on 4 RBL sites again.....<br />
how can I resolve this, I know its not an easy task - I am getting a Novell Engineer in here to upgrade the GroupWise to 6.5.6<br />
anything else I should do to start with?I guess whats the best course of action??
</div>
</div>


HI I have a GroupWIse 6.5.4 on Netware 6.0sp5
Past week my email domain user@abc.com has become blacklisted, I have requested removal from the 4 sites, and 3 were removed, the 4th said it will take 1 week.
But I checked again today and my IP was blacklisted on 4 RBL sites again.....
how can I resolve this, I know its not an easy task - I am getting a Novell Engineer in here to upgrade the GroupWise to 6.5.6
anything else I should do to start with?I guess whats the best course of action??

MY domain/ IP keeps getting blacklisted

Various techniques are used to prevent email spam (unsolicited bulk email). No technique is a complete solution to the spam problem, and each has trade-offs between incorrectly rejecting legitimate email (false positives) vs. not rejecting all spam (false negatives) - and the associated costs in time and effort. Anti-spam techniques can be broken into four broad categories: those that require actions by individuals, those that can be automated by email administrators, those that can be automated by email senders and those employed by researchers and law enforcement officials.

AntiSpam

Groupware, also known as collaborative software, is a type of application software designed to help people involved in a common task to achieve their goals. Software products such as email, calendaring, text chat, wiki, and bookmarking belong to this category whenever used for group work, usually in a workplace environment (as opposed to a social networking environment). Most popular groupware applications include Contact Management,MS Server Apps, Cloud Computing, Version Control, Chat/IM, Email Software, Conferencing Software, Outlook, Office Suites, Project Management Software, Content Management, Virtualization, and Cloud Services.