TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Need a little more information on what you're trying to filter. Example, if you're trying to filter all traffic involving a particular box (say 172.16.1.1), try setting up two filters. One with source 172.16.1.1 destination ANY protocol (whichever) source port ANY destination port ANY. and One with source ANY destination 172.16.1.1 protocol (whichever) source port ANY destincation port ANY. As for the email responses, verify a few things: You've correctly identified the email gateway. It's best to use it's IP address. You've correctly identified a proper email address, check spelling. You can telnet from the sensor box, over it's reporting NIC, to the email gateway's IP on port 25 and get a banner or prompt back. Email responses should work properly if all the above check out. The sensor will send an initial email that says something to the effect of the sensor being configured to send an email response, etc. Cheers, Brian Fitch Systems Engineer Internet Security Systems, Inc. -----Original Message----- From: Ledet, Latricia [mailto:[EMAIL PROTECTED]] Sent: Monday, May 06, 2002 4:00 PM To: '[EMAIL PROTECTED]' Cc: Ledet, Latricia Subject: Filtering & Email Notifications Help Please! I have attempted to set up a couple of filters as well as an email notification for certain events. My problem is: It's not working! I am running RS 6.0, and have Master Control when I modify and apply the modified policies to the sensor(s). But, although the console reflects my sensor(s) as using the updated (customized) policy, my traffic appears to be the same. Specifically, the traffic that I've so- called "filtered" continues to show up, and I do not get the email notifications that I've set up for certain events although I see those events occurring . Any Suggesstions? Thank you! Latricia
