Axent Raptor.
Or, as the latest version is called Symantec Enterprise Firewall. I've also
set it to block all the <ahem> popular exploits[1], which saves my IIS
server from having to drop them.
Can't help you with Pix, I'm afraid - but I'm sure someone will :)
[1] cmd.exe, root.exe, scripts, etc etc...
Les Bessant mailto:[EMAIL PROTECTED]
IT Manager, Sanderson Townend & Gilbert
Acting in a personal capacity
http://www.tiggercam.co.uk - New, improved and with more bounce!
>-----Original Message-----
>From: Anthony L. Sollars [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, September 19, 2001 9:45 PM
>To: Exchange Discussions
>Subject: RE: today's admin backwards virus
>
>
>what firewall do you use Les, I have a Pix and I would like to start
>blocking the .eml files also.
>
>-TOny
>
>-----Original Message-----
>From: Les Bessant [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, September 19, 2001 3:50 AM
>To: Exchange Discussions
>Subject: RE: today's admin backwards virus
>
>
>All current IIS patches.
>
>Mail scanned by www.messagelabs.com
>
>Firewall set to block .eml[1]
>
>Users housetrained.
>
>
>[1] Thanks to a tip on the Raptor mailing list
>
>Les Bessant mailto:[EMAIL PROTECTED]
>IT Manager, Sanderson Townend & Gilbert
>Acting in a personal capacity
>http://www.tiggercam.co.uk - New, improved and with more bounce!
>
>
>
>>-----Original Message-----
>>From: Jennifer Baker [mailto:[EMAIL PROTECTED]]
>>Sent: Wednesday, September 19, 2001 11:10 AM
>>To: Exchange Discussions
>>Subject: today's admin backwards virus
>>
>>
>>I was just noticing that most of the gurus of the list had
>>plenty of time
>>to respond to the list regarding various questions. Am I missing
>>something?
>>
>>I have been updating virus software, scanning mailboxes,
>>patching iis/owa
>>servers etc. all night. We were hit externally, but we only had to
>>restore one webserver (although it was similiar to a slightly
>>compressed
>>support.microsoft.com). Is there some
>>secret to this sh*t that you are keeping from me regarding quick draw
>>administration or is this something you pawn off to others?
>>
>>I will compensate for information. (Depending on
>>validity.)
>>
>>I'm not jealous or bitter, btw...not.
>>
>>Jennifer Baker
>>Fluke Corporation
>>http://www.fluke.com
>>http://www.flukenetworks.com
>>mailto:[EMAIL PROTECTED]
>>
>>
>>_________________________________________________________________
>>List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
>>Archives: http://www.swynk.com/sitesearch/search.asp
>>To unsubscribe: mailto:[EMAIL PROTECTED]
>>Exchange List admin: [EMAIL PROTECTED]
>>
>>_____________________________________________________________________
>>This message has been checked for all known viruses by Star Internet
>>delivered through the MessageLabs Virus Scanning Service. For further
>>information visit http://www.star.net.uk/stats.asp or
>>alternatively call
>>Star Internet for details on the Virus Scanning Service.
>>
>
>
>The information in this communication and any attachments is
>confidential
>and may be legally privileged. It is intended solely for the
>addressee. If
>you are not the intended recipient any use, review, dissemination,
>distribution or copying of this information is strictly
>prohibited. If you
>have received this communication in error please notify us
>immediately on
>0191 261 2681 and delete the original message and any copies of it.
>
>Any opinions, conclusions or other information in this message
>that do not
>relate to the official business of Sanderson Townend & Gilbert
>are neither
>given nor endorsed by the firm.
>
>
>_____________________________________________________________________
>This message has been checked for all known viruses by Star Internet
>delivered through the MessageLabs Virus Scanning Service. For further
>information visit http://www.star.net.uk/stats.asp or
>alternatively call
>Star Internet for details on the Virus Scanning Service.
>
>_________________________________________________________________
>List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
>Archives: http://www.swynk.com/sitesearch/search.asp
>To unsubscribe: mailto:[EMAIL PROTECTED]
>Exchange List admin: [EMAIL PROTECTED]
>
>_________________________________________________________________
>List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
>Archives: http://www.swynk.com/sitesearch/search.asp
>To unsubscribe: mailto:[EMAIL PROTECTED]
>Exchange List admin: [EMAIL PROTECTED]
>
>_____________________________________________________________________
>This message has been checked for all known viruses by Star Internet
>delivered through the MessageLabs Virus Scanning Service. For further
>information visit http://www.star.net.uk/stats.asp or
>alternatively call
>Star Internet for details on the Virus Scanning Service.
>
The information in this communication and any attachments is confidential
and may be legally privileged. It is intended solely for the addressee. If
you are not the intended recipient any use, review, dissemination,
distribution or copying of this information is strictly prohibited. If you
have received this communication in error please notify us immediately on
0191 261 2681 and delete the original message and any copies of it.
Any opinions, conclusions or other information in this message that do not
relate to the official business of Sanderson Townend & Gilbert are neither
given nor endorsed by the firm.
_____________________________________________________________________
This message has been checked for all known viruses by Star Internet
delivered through the MessageLabs Virus Scanning Service. For further
information visit http://www.star.net.uk/stats.asp or alternatively call
Star Internet for details on the Virus Scanning Service.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
