Blacklist/Whitelist

You can add email addresses and domains to your blacklist or whitelist by navigating to "Spam Filter / Spam Filter Lists". Add known spam domains to the blacklist or trusted domains to the whitelist to ensure better spam detection. Due to spoofing, it is not advisable to add your own email addresses to the whitelist.

When a spam sender is whitelisted, the spam report contains the line

"-100 USER_IN_WELCOMELIST"

and the spam rating will be approximately -100. The spam report can be found in the header of the email under "x-spam-report".

Blacklist for words

You can add rules for emails containing certain words by using the "Mail contains text" and/or "Subject contains text" conditions. You can handle these emails in different ways:

In the rules, you can apply the "Do not deliver message" action. Also, you can mark the email as spam with "Write specific text at the beginning of the subject" in the subject.

Custom rules

You can also navigate to "Spam Filter / Spam Filter Options / Custom SpamAssassin CF File" to create custom SpamAssassin rules instead, if you prefer to increase the spam score instead of marking these emails as spam directly. See this website to learn how to create custom rules: https://cwiki.apache.org/confluence/display/SPAMASSASSIN/WritingRules

URIBL

If you receive an unusual amount of spam emails, please check the "x-spam-report" entry in the header of one of the emails. If this contains the entry

URIBL_BLOCKED ADMINISTRATOR NOTE: The request to URIBL has been blocked. See https://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information.

then please follow the instructions on the linked website or in our Knowledge Base: https://knowledgebase.jam-software.com/7285 This step will noticeably improve the spam detection rate.

Changing existing SpamAssassin rules

If you want to change the spam score of existing SpamAssassin rules, you can follow the instructions on this website: https://cwiki.apache.org/confluence/display/SPAMASSASSIN/AdjustRuleScore.
You can also use the configurator in the Exchange Server Toolbox for this purpose. A customized default rule in the configurator overwrites the existing SpamAssassin rule.

Direct link to the entry

This can happen if SpamAssassin is overloaded. To fix the problem you can increase the MaxChildren and/or MaxSpare settings in the "C:\ProgramData\JAM Software\spamdService\SpamAssassinServiceController.config". Increasing MaxChildren allows SpamAssassin to use more processes, which allows it to scan more emails in parallel. Increasing MaxSpare allows SpamAssassin to keep more idle processes on reserve to react faster to load peaks.

Direct link to the entry

This is a problem of the ClamAV update server. It is not a critical problem, which will disappear by itself once the problem on the server has been fixed.

You can ignore the error messages until then, or enable the option "Log ClamAV Update errors as warnings only" in the Anti-Virus settings. Be sure to disable this option as soon as the problem is fixed.

Direct link to the entry

Unfortunately, the use of Office365 accounts in SmartPOP2Exchange is currently no longer possible.

Our implementation of two-factor authentication using OAuth2 has not been working recently.

Since there have been no changes to SmartPOP2Exchange during this time, everything points to a change in the Microsoft interface. Unfortunately, no changes have been documented by Microsoft in this regard and we have been referred to the use of a software library which we unfortunately cannot use in SmartPOP2Exchange for technological reasons.

We are considering removing the OAuth2 authentication feature completely from SmartPOP2Exchange in an upcoming release, but are waiting to see if there are any further changes to the interface from Microsoft.

Direct link to the entry

During your maintenance period, they are located at Downloads/Updates -> Older versions in the customer area, if you are logged in to your customer account.

You should be able to find the installation files and keys of the two last major versions there.

Direct link to the entry

The followings paths should be excluded in any external security program:

• C:\ProgramData\JAM Software\ClamAVInABox
• C:\ProgramData\JAM Software\SmartPOP2Exchange
• C:\ProgramData\JAM Software\spamdService
• C:\Program Files (x86)\Common Files\JAM Software\ClamAVInABox
• C:\Program Files (x86)\Common Files\JAM Software\SpamAssassin
• C:\Windows\System32\config\systemprofile\.spamassassin

This is important so that SmartPOP2Exchange can check emails for viruses undisturbed. Since SmartPOP2Exchange receives emails via TCP and temporarily stores them locally for virus scanning, the processes in the listed folders must be undisturbed during these operations. If security software interferes with the process, errors may occur during email processing.

In addition, it can happen that the virus signatures used by ClamAV are themselves detected as viruses. If something deletes or blocks the signatures, SmartPOP2Exchange cannot provide virus protection.

You can find further information on how to use SmartPOP2Exchange and an external virus scanner at the same time in the help under Anti-virus software.

Direct link to the entry

In order to forward emails without a valid recipient to a collective address you need to configure an SMTP error rule. You can configure this rule for a single account or as a global role.

Go to SMTP Error Rules and add a rule with the condition "Match error code with [specified number]. The error number is 550. Add the action "Send copy to [specified recipient]" and set the collective address.

Please note that in order for this rule to work your email server needs to be configured to reject emails with an invalid recipient. You can find instructions on configuring your Exchange Server here.

Direct link to the entry

None of our applications depend on Java Spring or any other Java library and are thus not affected by this vulnerability.

All of our products are being developed in Delphi or C#. Although we use Spring4D(elphi) with some of the components, they are safe to use, because the reported vulnerability applies to Java Spring framework only.

This applies to all versions and editions of our applications (TreeSize, SpaceObServer, SpaceObServer WebAccess, HeavyLoad, SmartPOP2Exchange, Exchange Server Toolbox, SpamAssassin in a Box, SpamAssassin for Windows, SmartCallMonitor, SEPA-Transfer, ServerSentinel, and ShellBrowser). It is recommended to always use the latest available versions though to benefit from the latest patches, improvements, and features.

Direct link to the entry

To install SmartPOP2Exchange on another server, do the following:

• Stop the SmartPOP2Exchange service on the old server
• File > Export settings
• File > Export Accountdata
• Stop SmartPOP2Exchange service on the old server
• Install SmartPOP2Exchange on the new server
• File > Import settings
• File > Import Accountdata
• Uninstall SmartPOP2Exchange on the old server
  

Direct link to the entry

Yes, SmartPOP2Exchange and Exchange Server Toolbox can be installed together on the same server. When doing so, you should take this into account:

Problems with direction detection

In older versions there were problems with direction detection when SmartPOP2Exchange and the Exchange Server Toolbox were installed on the same server. To fix this, a rule is now created when SmartPOP2Exchange is installed that automatically assigns a new header field (X-JamMailSource) with a value (MailGateway) to all emails. In the Exchange Server Toolbox, this header is queried under Settings | Advanced | Mail Direction, and emails with this header field and header field value are always considered Incoming.

You can adjust these values if you want, but please make sure that they are the same in both programs.

Always keep versions up to date

Please note that you must always have the latest versions of both programs installed. Otherwise it is possible that SpamAssassin or ClamAV will be updated to a version that the other program cannot use.

Spam and virus scanning in one program only

To avoid wasting time and resources unnecessarily, you should run the spam and virus scans in only one of the programs. Since SmartPOP2Exchange and Exchange Server Toolbox share an installation of ClamAV and SpamAssassin, the scanning results are identical.

You should consider the following things when deciding which of the programs to use for scans:

Advantages of scans in the Exchange Server Toolbox

The Exchange Server Toolbox offers more configuration options and more rule actions for both scans. Therefore, the scans and especially the reaction to different results can be customized in much more detail.

Advantages of scans in SmartPOP2Exchange

Since in this configuration the Exchange Server Toolbox receives the emails directly from SmartPOP2Exchange, rejecting emails in the Exchange Server Toolbox should be avoided (otherwise this will lead to errors in SmartPOP2Exchange). So it is only possible to reject emails (based on scan results) with SmartPOP2Exchange. However, you should keep in mind that the emails have already been delivered to an account, so SmartPOP2Exchange not picking them up can be legally problematic.

Direct link to the entry