IPS blocking incoming webmail... Strange

james.talbot · ‎05-09-2007

We have enabled an IOS based IPS on our internet routers and all seems to be working well apart from a strage issue. We are currently only alerting on all signitures so no traffic should be droppped. The problem i have is with incoming hotmail and yahoo mail messages which fail to be delivered to the recipents on our mail server. When we disable the IPS the mails soon arrives after.

I have applied the IPS inbound on the internet faceing interface. Can anyone shed some light as to why we have this issue.

carenas123 · ‎05-15-2007

It could be configurtion issue,

refer this link how to configure the sensor to Blocking devices

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids10/idmiev/swchap3.htm#wp32394

Wilson Samuel · ‎05-21-2007

Hi,

Could you please elaborate the Router IOS and IPS version so that we may get a better idea of whats going on?

Kind Regards,

Wilson Samuel

james.talbot · ‎05-23-2007

OK

our router version is c7301-advipservicesk9-mz.124-9.T.bin.

Not sure where to find the IPS version. I have completed further testing on this issue. When i have enabled the IPS on inbound and outbound traffic i cannot receive hotmail emails and i am unable to access the hotmail website.

could HTTP redirects be an issue.