Microsoft KB Archive/305012

= How to remove corrupt entries from the SMTP filter =

Article ID: 305012

Article Last Modified on 1/5/2005

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2000 Standard Edition

-



This article was previously published under Q305012



Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SUMMARY
A problem that exists with the SMTP message screener may result in corrupt entries in the configuration of the SMTP filter on the Attachments or Keywords tab.

To locate this part of the user interface:
 * 1) Start the ISA Management console.
 * 2) Click the server or array name, click Extensions, and then click Application Filters.
 * 3) Right-click SMTP Filter, and then click Properties.
 * 4) Click the Attachments or the Keywords tab.

Follow the instructions in the &quot;More Information&quot; section of this article to remove the corrupted entries.

To prevent future corruption, install the hotfix that is referenced in the following article in the Microsoft Knowledge base:

292014 Deleting disabled SMTP filter attachment rule leaves corrupted rule



To Remove Corrupt Entries on Registry-Based Computers
 Click Start, click Run, type Regedit, and then click OK. Locate and then click the following registry subkey:

HKLM\Software\Microsoft\FPC\VendorparameterSets

 Identify the correct vendor parameter set.

There may be several vendor parameter sets that hold information about various settings; therefore, it is important to identify the correct one. To identify the set for the affected area Attachments or Keywords, create an attachment rule with a traceable value. For example, use 123456789 or abcdefgh and then search for the msFPCBlobData value in each vendor parameter set. Some sets may not have this value. On the ones in which it exists, double-click to open it, and then under value data, search for the trace word. After you have identified the vendor parameter set, delete it and then all entries in the related section will be removed. Re-enter the values and no further corruption should occur.

To Remove Corrupt Entries on Active Directory-Integrated Installations
Warning If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Windows Server 2003, Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk. Note The Active Directory Service Interfaces (ADSI) Edit snap-in is included with the Microsoft Windows Support Tools. To install the Windows Support Tools in Microsoft Windows 2000, double-click the Setup.exe file in the Support\Tools folder on the Windows 2000 CD. To install the Windows Support Tools in Microsoft Windows Server 2003, double-click the Suptools.msi file in the Support\Tools folder on the Windows Server 2003 CD.  Click Start, click Run, type adsiedit.msc, and then click OK.</li> Follow this path for each VendorParameterSet:

Config Container \ CN=Services\ CN=Fpc \ CN=VendorParameterSets

</li> Open it, and then set the Select a Property to view option to msFPCblobData.</li> Copy the entire string in the value section in the attribute values group, and then paste it into Notepad.

For example:

123456789 produces the following hexadecimal pattern:

0x31 0x00 0x32 0x00 0x33 0x00 0x34 0x00 0x35 0x00 0x36 0x00 0x37 0x00 0x38 0x00 0x39

abcdefgh produces the following pattern:

0x61 0x00 0x62 0x00 0x63 0x00 0x64 0x00 0x65 0x00 0x66 0x00 0x67 0x00 0x68

The complete data string may be much longer, but searching for the pattern in Notepad can confirm that you have identified the correct set.</li> Delete the set that contains the corruption.</li> Refresh the ISA Administration console and verify the changes in the SMTP Application filter properties.</li></ol>

Keywords: kbhowto kbenv KB305012

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.