Warning mail.mydomain.com: CASE update unsuccessful. This may be due to transient network

Today I receive email from Ironport C160

Here is the message:

Subject: Warning mail.mydomain.com: CASE update unsuccessful. This may be due to transient network

The Warning message is:

CASE update unsuccessful. This may be due to transient network or DNS issues, HTTP proxy configuration causing update transmission errors or unavailability of the configured download server. The specific error on the appliance for this failure is: Error transferring CASE update directory information 'http://downloads.ironport.com/as/case.ini': I/O error opening URL 'http://downloads.ironport.com/as/case.ini?version=7.1.1-012&model=C160&serial=A4BADBDF7264-CNQH5M1&t_version=3.0.0-031&e_version=3.0.0-031&has_vof=0&has_ipas=1&has_sbnp=1'

Version: 7.1.1-012
Serial Number: XXXXXXXXX-CNQH5M1
Timestamp: 10 Dec 2010 07:58:55 +0700

To learn more about alerts, please visit our Knowledge Base. In many
cases, you can find further information about this specific alert. Please
click the Knowledge Base link after logging into our Support Portal at:

https://supportportal.ironport.com/irppcnctr/srvcd?u=http://secure-support.soma.ironport.com/products/&sid=900002

If you desire further information, please contact your support provider.

To open a support request for this issue, access the IronPort C160
and issue the "supportrequest" command. The command sends an email with
diagnostic information directly to your IronPort support provider to
facilitate a rapid diagnosis of the problem.

Thank you.


This occurs because the connection from Ironport to download source is disconnected. If this happens to Ironport you should check your internet connection.

Spam Sample Detected on Ironport

Here is the sample of message tracking on Ironport. This sample show you message detected as spam.

23 Nov 2010 14:45:43 (GMT +07:00) Protocol SMTP interface Data 2 (IP x.x.x.x) on incoming connection (ICID 553215) from sender IP 202.72.55.143. Reverse DNS host rmail1016c.rakuten.co.jp verified yes.

23 Nov 2010 14:45:43 (GMT +07:00) (ICID 553215) ACCEPT sender group UNKNOWNLIST match sbrs[-1.0:10.0] SBRS 0.0

23 Nov 2010 14:45:43 (GMT +07:00) Start message 99994 on incoming connection (ICID 553215).

23 Nov 2010 14:45:43 (GMT +07:00) Message 99994 enqueued on incoming connection (ICID 553215) from 224379@rmailmf.rakuten.co.jp.

23 Nov 2010 14:45:44 (GMT +07:00) Message 99994 on incoming connection (ICID 553215) added recipient (user@domain.com).

23 Nov 2010 14:45:45 (GMT +07:00) Message 99994 contains message ID header 20101123074537.8b0ef2fe849@rmail110c.rakuten.co.jp.

23 Nov 2010 14:45:45 (GMT +07:00) Message 99994 original subject on injection: 【号外】｜メルマガ会員限定|割 \r\n 引率ＵＰ♪●セレカジざっくりニット素 \r\n 材タートルネックワンピやリンジーロー \r\n ハンご愛用ワンピも

23 Nov 2010 14:45:45 (GMT +07:00) Message 99994 (43449 bytes) from 224379@rmailmf.rakuten.co.jp ready.

23 Nov 2010 14:45:45 (GMT +07:00) Message 99994 matched per-recipient policy DEFAULT for inbound mail policies.

23 Nov 2010 14:45:45 (GMT +07:00) Message 99994 scanned by Anti-Spam engine: CASE. Interim verdict: Positive

23 Nov 2010 14:45:45 (GMT +07:00) Message 99994 scanned by Anti-Spam engine: CASE. Final verdict: Positive

23 Nov 2010 14:45:46 (GMT +07:00) Message 99994 quarantined to Policy. Content filter my_policy.

Tracking message on Ironport C160

If you have email problem and you need to track message on ironport C160 do the following steps:

1. Login to Ironport Web Console using authenticated user
2. Go to Monitor > Message Tracking.
3. Massage tracking page will display. In this page you can fill any necessary text to perform filter process on how message tracking you want to display.
4. Fill in text box Envelope Sender with appropriate condition (Is, Begin With or Contains)
5. Fill in text box Envelope Recipient with appropriate condition (Is, Begin With or Contains)
6. Fill in text box Subject with appropriate condition (Is, Begin With, Contains, or Is Empty)
7. Define range of time the message is received: Last day, Last Week or Custom Range.
8. Click on Search Button to view the log result depend on your filter setting

Decreasing the memory usage of OfficeScan client on a terminal server

Problem:
A terminal server hosts multiple user sessions at once and OfficeScan starts up the client GUI for each session.

Use this solution to modify the default settings so that the OfficeScan client GUI does not start up for every session, which in turn can help save system memory.

Please do the following:

1. Log on to the OfficeScan management console.
2. Go to Networked Computers > Client Management.
3. Select the OfficeScan client and then click to Settings > Privileges and Other Settings > Other Settings tab.
4. Under Client Console Access Restriction, select the Do not allow users to access the client console from the system tray or Windows Start menu check box.
5. Click Apply to All Clients.

By setting this restriction, your users will not be able to access the client console from the system tray or Windows Start menu. OfficeScan will run in the background and will continue to provide protection from security risks. This setting will also save you 6.5 to 7 MB of memory for each session in the terminal server.

Checking Quarantine Mail on IronPort

If you use Ironport C160 as a spam filter in your office, you have to check Quarantine mail is there any needed mail stop by Ironport. To check quarantine mail you log in to Ironport as administrator user and then go to menu Monitor > Quarantine page.

On the Quarantine page you can find out the number of emails that go into quarantine. There are 4 types of quarantine they are quarantine spam, outbreaks, policy and viruses.

1. Spam quarantine is an incoming email from the internet because it includes categories of spam. Ironport analyze each incoming email, and categorize it as spam if they meet certain conditions.

2. Outbreaks. The virus outbreak Filters engine compares incoming messages with rules published Virus outbreak filters. Messages that match rules are assigned a threat level and That threat level is compared to the threat level threshold you set. That meet or exceed Messages That threshold are quarantined.

3. Policy. You can set its own policy for the incoming emails to be quarantined. For example, an email coming into your domain with a user name that is no longer working in your office.

4. Viruses. Emails that contain viruses, of course, must be blocked not to enter a user inbox as it can endanger your data and network. In order for an email that contains a virus can always be quarantined of course you should always update your antivirus.

To find out details quarantined email data that you must click on the type of quarantine you want to see. Suppose you want to see the detail of policy data, then you cklik on policy. Immediately quarantine emails detailed data from the policy settings will be displayed as a table of data consisting of the recipient, sender, email subject, schedule an exit and the size of the email. To view the message body of each email you click on the subject field. So Ironport will display the contents of the message body of the email address you choose.

Download video files from YouTube

Do you often watch videos from YouTube? If you find the video that you like and you want to download it into your computer, you need to use special software to download video files from YouTube.
There are plenty of software to download video files from YouTube of which I've tried is YouTube Downloader. You can download it for free at http://youtubedownload.altervista.org
Once you downloaded YouTube Downloader and install this software on your computer, run the YouTube Downloader applications.

• In the text box "Enter the URL of the video You Want to download (e.g. http://youtube.com/watch?v=f5Jz8 ...)" fill in the URL link where the video will be downloaded.
• By default the downloaded file will be saved in My Document. If you want to change click the Change button and browse to the new location that you want.
• Click the Download button to start the download process.
  
  
  
  Wait until the progress bar is full and there is notice download completed.
  With this application you are also able to convert video files from one type of file to another video file type. Suppose you want to convert video file type MP4 to 3gp.
  
  

To convert a video file format you click on Convert or play a video you have already downloaded option. In the text box select the video type the name of the file to be converted. Later in the combox Convert Video To: choose a new video file types that you want. Click the Convert button to start the process of convert file.