Trustwave SpiderLabs Exposes Unique Cybersecurity Threats in the Public Sector. Learn More

Trustwave SpiderLabs Exposes Unique Cybersecurity Threats in the Public Sector. Learn More

Services
Capture
Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

twi-managed-portal-color
Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

twi-briefcase-color-svg
Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

tw-laptop-data
Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

twi-database-color-svg
Database Security

Prevent unauthorized access and exceed compliance requirements.

twi-email-color-svg
Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

tw-officer
Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

tw-network
Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Microsoft Exchange Server Attacks
Stay protected against emerging threats
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
Loading...
Loading...

HOWTO: How do I configure MailMarshal to collect email from multiple POP3 Servers?

Expand / Collapse


This article applies to:

  • Trustwave MailMarshal (SEG)

Question:

  • How do I configure MailMarshal to collect email from multiple POP3 Servers?
  • How do I configure MailMarshal 6.4 and above to collect email from POP3 Servers?

Limitations:

SEG POP3 collection is a basic feature provided as a convenience.

  • This feature can only be used where a system has a single processing node.
  • Administrative tools are not provided beyond basic manual password creation (or use of Windows account if the server resides in a domain environment).
  • Because of the above limitations this feature only suits very small numbers of mailboxes (normally 10 or fewer). It could be used as a way of separating some unusual addresses from the main delivery server.

Many full featured POP3 solutions are available free. Customers needing POP3 as a main method of client access should explore other options.

Procedure:

It is possible to enable MailMarshal to collect mail from more than one POP3 server.  This can be done by creating a batch file using the MMGetMail.exe command to collect mail from each POP3 server and then configuring MailMarshal (or a Windows scheduled task) to execute the batch file.

Note: MailMarshal SMTP 6.4 and above no longer provides Mail Batching configuration through the Configurator. However you can still use MMGetMail through a Scheduled Task.

In an array installation, run MMGetMail.exe on an email processing server (node). MMGetMail.exe will not perform as expected if run on an Array Manager that does not process email. 

Create a batch file using the MMGetMail.exe command to collect mail from each POP3 server by doing the following:

  1. Create a batch file in the MailMarshal directory. (If you need help with the location of this directory, see Q10832). Use the following syntax to collect mail for each POP3 account:

    "C:\Program Files\Marshal\MailMarshal\mmgetmail.exe" -s <server> -u <user> -p <password> [options]

    For example:
    "C:\program files\Marshal\MailMarshal\ MMGetMail" -s server1 -u user1 -p password1
    "C:\program files\Marshal\MailMarshal\ MMGetMail" -s server2 -u user2 -p password2
  2. Configure MailMarshal to execute the batch file (6.2 and below).
    1. Go to Tools | Server and Array Properties | Batching & Dial-Up tab.  (In MailMarshal 5.x go to Tools | Server Properties | Batching & Dial-up tab).
    2. Select the Enable Mail Batching option.
    3. Select Via command.
    4. Enter the following path, where "collect.bat" is the name of the batch file you created previously:
      c:\winnt\system32\cmd.exe /c "c:\program files\Marshal\mailmarshal\collect.bat"

      -OR-

      c:\windows\system32\cmd.exe /c "c:\program files\Marshal\mailmarshal\collect.bat"
    5. Click OK and reload the MailMarshal configuration.

Available options for use with the MMGetMail command are:

  • -s <server>  POP3 server to retrieve mail from.
  • -P <port> Remote POP3 server port.
  • -u <user>  User name to connect to server with.
  • -p <password>  Password for POP3 account.
  • -a  Use APOP authentication.
  • -k  Keep messages on server (only for testing).
  • -d <host>  Destination SMTP server (defaults to localhost).
  • -e <email>  Address all messages with no local recipient to <email>.
  • -E <email>  Address all messages from this POP3 account to <email>. If not supplied then the address fields are searched for likely local email addresses.
  • -r <field list> (6.4 and above) List of fields to search. See details below.

Address fields configuration

By default MMGetMail searches the following address fields:

to:
resent-to:
cc:
resent-cc:
bcc:
resent-bcc:

To find out what fields the remote POP3 server uses, consult the POP3 server service provider.

Versions 6.2 and below:

If no options are supplied then the configuration is read from the registry.

To add or remove fields, open Server and Array Properties > Batching & Dial-up tab. Select the Via POP3 account option, and then click Modify. You can also edit the following Registry value (present by default):

HKEY_LOCAL_MACHINE\SOFTWARE\NetIQ\MailMarshal\Default\Sender
  
Value name: RecipientsFields (REG_MULTI_SZ)

 

Versions 6.4 and above:

You must supply command line options. The Registry is not used.

To add or remove address fields, use the following command line option:

  • -r <field list>  A comma separated list of recipient fields to search.
    For example: to:,cc:,bcc:,x-recipient:

Notes:

The location of the MailMarshal install directory differs depending on what version was originally installed. For more information, see Trustwave Knowledgebase article Q10832, What are the MailMarshal SMTP install paths and registry key locations?

This article was previously published as:
NETIQKB29162
Marshal KB110

    To contact Trustwave about this article or to request support:


    Rate this Article:
         

    Add Your Comments


    Comment submission is disabled for anonymous users.
    Please send feedback to Trustwave Technical Support or the Webmaster
    .