Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » I don't received an email with large attached files(such as 3mb, 4mb...) when have Kerio Control
  •  
duytruongnguyen

Messages: 19

Karma: 0
Send a private message to this user
I use Ms outlook 2007, I don't received an email with large attached files(such as 3mb, 4mb...) when have Kerio Control
I have attach file with Traffic Rule. You check and I configure wrong part?
Please, you help me. Thank you

[Updated on: Mon, 23 July 2012 12:57]

  •  
Anton Tikhonov (kerio)

Messages: 25
Karma: 0
Send a private message to this user
Hi!

Tell me please, your users using KControl as default gateway and DNS serever? If yes, than try to create new traffic rule at the top of the list:

src_trusted\local interfaces
dst_Internet interfaces
svc_pop3\smtp
act_allow
trn_NAT(default)
inspector_none

apply and try to get new emails.
  •  
duytruongnguyen

Messages: 19

Karma: 0
Send a private message to this user
I have DC Server with
IP: 192.168.1.2
SM: 255.255.255.0
DG: 192.168.1.4
DNS:192.168.1.2

Kerio Control Server with IP : 192.168.1.4. So I configure 2 net card :
- INTERNAL :
IP: 192.168.1.4
SM: 255.255.255.0
DG: blank
DNS : 192.168.1.2

- EXTERNAL:
IP: 192.168.3.10
SM: 255.255.255.0
DG: 192.168.3.1
DNS: blank

I'm using Kerio Control 7.3.0 build 3861. I don't see "inspector"
Accessing website is OK, but I don't why don't receive email with large attached file. If mailbox have an email with large attached file(3mb,4mb,..), Ms Outlook 2007 receive so slowly and when I will see Ms Outlook 2007 receive emails with subject blank.

Please, you help me. Thank you.

  • Attachment: emails.JPG
    (Size: 73.17KB, Downloaded 303 times)

[Updated on: Tue, 24 July 2012 02:59]

  •  
ICT and Me

Messages: 940

Karma: 53
Send a private message to this user
Duy,

Change the DNS IP on the DC to the ip of Control.
And on Control remove the DNS IP by the LAN card.
Control shall not block large attachments. Otherwise you could also not download large files.
The block is most likely done in your mailserver. There is no setting in Control what will block.


ICT and Me
Carlo Turk
The Netherlands
www.ictandme.nl
  •  
duytruongnguyen

Messages: 19

Karma: 0
Send a private message to this user
./fa/2655/0/Normally I can download large files from website, only Ms outlook can't receive emails with large attached files. I checked email by website, if email on website have some message with large attachments, Ms outlook will have problem and will have error when receive emails. If I move message with large attachments, Ms outlook can receive message.
If I change DNS IP on DC, I must change what IP? Because I configure DHCP on DC SERVER as:
Router IP : 192.168.1.4
DNS SERVER: 192.168.1.2,210.245.31.220,210.245.31.221 (this DNS of ISP).
WINS/NBNS SERVER: 192.168.1.2
WINS/NBT node Type : 0x8

I have attach file about IP of Kerio Control, IP of DC SERVER, IP OF MY PC when DHCP SERVER provide.
So please, you check them me, I configure network incorrect for what part?
And about sites have https, how do I block it?

  •  
Anton Tikhonov (kerio)

Messages: 25
Karma: 0
Send a private message to this user
duytruongnguyen

are you ignoring my post? Cool))
create traffic rule that i've post above. this issue can be caused by pop3 protocol inspector, this rule can help to solve it

*keep in mind that this rule should be above your default NAT rule
  •  
duytruongnguyen

Messages: 19

Karma: 0
Send a private message to this user
I create this rule already, but Ms outlook still block when receive large attachments.
So I delete this rule. Because I think I created a rule:

src_trusted\local interfaces
dst_Internet interfaces
svc_any
act_allow
trn_NAT(default)
Balacing per host
  •  
Anton Tikhonov (kerio)

Messages: 25
Karma: 0
Send a private message to this user
duytruongnguyen

can you show me screen of this rule, did you disable PI for this rule?
  •  
duytruongnguyen

Messages: 19

Karma: 0
Send a private message to this user
I have upload Traffic Rules.JPG, you can see it
  •  
Anton Tikhonov (kerio)

Messages: 25
Karma: 0
Send a private message to this user
duytruongnguyen
i can't see inspector column and i can't see rule that i've asked you to create too. are you understand what i'm asking you to do, or my English is toooooo bad?
  •  
duytruongnguyen

Messages: 19

Karma: 0
Send a private message to this user
I have attach file again. Please, you check it.

[Updated on: Fri, 27 July 2012 09:27]

  •  
Anton Tikhonov (kerio)

Messages: 25
Karma: 0
Send a private message to this user
duytruongnguyen

ok, and what about 1st rule in the list?

on more can you please put here suppinfo file from status\system health windows of web admin.
  •  
duytruongnguyen

Messages: 19

Karma: 0
Send a private message to this user
I created a 1st rule as you guide:
"Tell me please, your users using KControl as default gateway and DNS serever? If yes, than try to create new traffic rule at the top of the list:

src_trusted\local interfaces
dst_Internet interfaces
svc_pop3\smtp
act_allow
trn_NAT(default)
inspector_none"

So you think I need create 1st rule ? Because I have a rule for accessing internet with 5th rule.

  •  
duytruongnguyen

Messages: 19

Karma: 0
Send a private message to this user
This is system health of Kerio Control

Anton Tikhonov (kerio)

Messages: 25
Karma: 0
Send a private message to this user
duytruongnguyen

so it look like you're really ignoring my posts Cool))

I've asked you to create 1st rule with disabled protocol inspection, but you've created it with enabled inspector and disable inspector on 5th rule, why so?

btw, I've asked you about support information file from sys.health, not a screenshot of this window.

[Updated on: Fri, 27 July 2012 10:04]

Previous Topic: Configuring Failover /Load balancing with 4 ADSL links
Next Topic: Software Appliance use MS AD login,don't can one user login one pc
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Oct 23 06:22:54 CEST 2017

Total time taken to generate the page: 0.00595 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.