We'll answer in reverse order.

The FQDN is the name that appears in the welcome banner that SpamFilter sends out when a server connects to it. So yes, extrasight.com is fine. It may be even better to place there the DNS name as it appears in your MX record.

Your configuration is correct. SpamFilter listening on an IP, and then setting its "destination" to the Exchange's IP.

The error "Could not bind socket. Address and port are already in use" is caused by the SpamFilter not being able to create a listening socket. The "destination" IP is simply where email will be forwarded to, SpamFilter will not try to bind to that address, is will only make a connection to it to deliver email to it. Going back to the error, it means that the IP:port listed in the "listen" field is already taken by another application. Are you sure that Exchange is not configured to bind to ALL IPs on the NIC card? That would be the most likely cause.

It should not be the case with Exchange, but we have seen cases of some mail servers that offer no other options but to bind to all IPs on a server. They cannot be configured to listen to a particular IP. The solution in that case is to force SpamFilter's service to start *before* the mail server, by using service dependencies. THe theory is to specify in the registry entry for the other mail service that it depends on the SpamFilter service. This will cause it to wait until SpamFilter is started before starting itself. Once SpamFilter has started, the listening IP will be in use by SpamFilter, and the mail server will not bind to it.

Roberto Franceschetti LogSat Software

Robert,

If you leave the "Listen" field in SpamFilter blank, SpamFilter will bind to all IPs in the NIC. If you do specify an IP, it will only bind to it.

You can verify that this is so by making a copy of the SpamFilter directory to another location, and changing the ListenIP and ListenPort in the spamfilter.ini copy to x.x.0.3 and 25 and the starting the second instance of SpamFilter in addition to your first one. If both copies can run at the same time without "bind on socket" errors, then you'll know SpamFilter is only taking up a single IP/port combination, and that you need to look on the SMTPSVC side for a problem.

Roberto

I've clicked the button to create the service. That was successful, but the service fails on start. Here is the full error message from the Application event log:

Event Type: Error Event Source: SpamFilterSvc.exe Event Category: None Event ID: 0 Date: 3/28/2003 Time: 9:48:45 PM User: N/A Computer: ES03 Description: The description for Event ID ( 0 ) in Source ( SpamFilterSvc.exe ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: Could not bind socket. Address and port are already in use..