Installation instructions

GFI MailSecurity for Exchange/SMTP Quarantine 117
7. Click Update DN list to populate the Base DN list and select the
appropriate entry from the list.
8. To test your LDAP configuration settings, specify a valid email
address in the Email address box and click Test. If the lookup
succeeds, Email address found is displayed underneath the Email
address box.
NOTE 1: If you installed GFI MailSecurity in Active Directory user
mode on a DMZ, the Active Directory of a DMZ normally does not
include all the network users (i.e. email recipients) and as a result, you
will be getting many false positives. In such cases, we recommend
that you perform Directory Harvesting checks using LDAP lookups
(i.e. click Use LDAP lookups and specify your LDAP server details).
NOTE 2: When GFI MailSecurity is setup behind a firewall, the
Directory Harvesting feature will not be able to connect directly to the
internal Active Directory because of the Firewall. In this case, although
both options will be available, you must use LDAP lookups in order to
enable the Directory Harvesting filter to connect to the internal Active
Directory of your network (i.e., pass through your Firewall). Make sure
to enable default port 389 on your Firewall
NOTE 3: When connecting to an Active Directory using LDAP (i.e.
when GFI MailSecurity in installed on a DMZ or behind a Firewall),
you have to specify the authentication credentials in this form:
Domain\User (e.g. master-domain\administrator).
NOTE 4: In an Active Directory, normally the LDAP server is the
Domain Controller.
9. If you want to keep a log of the emails that GFI MailSecurity deletes
through the Directory Harvesting filter, select the Log occurrence to
this file check box and specify a log file name in the box below.
10. Click Apply.