search cancel

Email headers not being modified by Data Loss Prevention Network Prevent for Email servers in reflect mode.

book

Article ID: 163101

calendar_today

Updated On:

Products

Data Loss Prevention Network Email

Issue/Introduction

Default email X-header applied by DLP Network Prevent for Email server and viewable from packet capture.
Modified email X-headers are not viewable from a packet capture and mail is not blocked downstream because of the missing header information.

SMTPPrevent_Operational log errors:
Peer disconnected unexpectedly
Message not accepted by forwarder
4.4.2 service timed out.
disposition=ERROR code=421

RequestProcessor log errors:
com.vontu.mta.rp.ESMTPRequestProcessorThread handleMTAException
java.net.UnknownHostException

Caused by: java.net.UnknownHostException: SERVERNAME: unknown error

at java.net.Inet6AddressImpl.lookupAllHostAddr(Native Method)

at java.net.InetAddress$2.lookupAllHostAddr(InetAddress.java:907)

at java.net.InetAddress.getAddressesFromNameService(InetAddress.java:1302)

at java.net.InetAddress.getLocalHost(InetAddress.java:1479)


 

Cause

The DLP Network Prevent for Email server failed to resolve it's own hostname through java.net.InetAddress.getLocalHost().

Resolution

Add the DLP Email Prevent IP and Hostname to /etc/hosts to resolve the issue.
Example:

127.0.0.1 SERVERNAME localhost
192.168.8.55 SERVERNAME