Not true here. We attempt to block CR/Nimda at our Cisco routers. However, some gets through. Per Cisco TAC, and our experience, there are variants of these worms that are fragmented packets; unblockable using Cisco NBAR. Check your http logs or run an intrusion detection system, and if your network is like ours, you will see these variants make it to your servers.
Cisco's solution is an IDS filtering box after the router and before the servers. Cheers, Mike >Pure crap .. we block code red at our routers and no code red traffic >makes it to our web servers period .. web msg still crashes and has >horrible performance .. this is a Ipswitch issue not a code red issue .. >They have got to come up with a better one than that. > >Brian Watters > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED]] On Behalf Of Scott Baker >Sent: Monday, March 04, 2002 2:43 PM >To: [EMAIL PROTECTED] >Cc: [EMAIL PROTECTED] >Subject: RE: [IMail Forum] IMail Server 7.06 test results by >Humankind... > >I think this is a more wide spread issue that IPSwitch lets on. > >I called tech support this morning because the service keeps crashing >and >the support rep told me that my problem was most likely due to the fact >that I run web messaging on port 80 instead of the default 8383. The >way >that CodeRed/Nimda works is... blah blah blah, and that was probably >crashing my server. They are aware that CodeRed/Nimda may cause the >service to crash if it runs on port 80. It has been known issue since >7.03 >but they DON'T plan on addressing it in a future release. > >Their solution was for me to run my server on port 8383, which would be >immune from CodeRed/Nimda. That's complete garbage! This server has >been >running for a year or so (on port 80) and I haven't had nearly this many > >webmessaging problems. > >I suggest that you call IPSwitch directly and talk to their support >staff. If enough people complain they'll have to address the issue. > >At 08:27 AM 3/4/2002 -0800, you wrote: > > >>-----Original Message----- >>From: Adam (Snowboard) [mailto:[EMAIL PROTECTED]] >>Sent: March 1, 2002 2:51 PM >>To: [EMAIL PROTECTED] >>Subject: Re: [IMail Forum] IMail Server 7.06 test results by >Humankind... >> >> >>Wow version 7.06, Not even 5 miuntes after we installed it, >webmessaging >>crashed. I installed it less than half an hour agao and it has already >>crashed 5 times. woo hoo >> >>-------------------- >> >>Same here, I installed the upgrade on Friday afternoon and web >messaging has >>crashed twice since. So much for the "increased stability". I am really >>disappointed with most of the recent patches for 7.x. There have been >very >>few real improvements and each patch introduced new problems more >serious >>than the ones they were supposed to fix. Web messaging has been and >>continues to be unstable. The only improvement I see here is that at >least >>now when web messaging crashes, the service dies instead of the way it >was >>previously when it crashed, but the Service Control Manager and the >Imail >>monitor said it was still running. >> >>Come on Ipswitch you can do better than this. If this continues to be a >>problem (most of our users use web messaging) then we will have to find >>another product to serve our users. > > >Please visit http://www.ipswitch.com/support/mailing-lists.html >to be removed from this list. > >An Archive of this list is available at: >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >--- >[This E-mail scanned for viruses by Security Scan Operations Center] > > > >--- >[This E-mail scanned for viruses by Security Scan Operations Center] > > >Please visit http://www.ipswitch.com/support/mailing-lists.html >to be removed from this list. > >An Archive of this list is available at: >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
