Creating and Populating AD via import/export
Hi, I need help, I want to use the import/export util's to populate the AD just as I used to with Exchange 5.5, but ldifde or csvde doesn't seem to work for me can someone help, with the right syntaxes. Toks Etti -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 29 October 2001 15:48 To: MS-Exchange Admin Issues Subject: RE: attribute to remove user when importing Yep, that worked in my environment. As soon as the import completed I checked the store and neither the mailbox nor it's store were there unlike if I were to just deleted the mailbox in the Admin. Thanks for the tip. -Original Message- From: John Matteson [mailto:[EMAIL PROTECTED]] Sent: Friday, October 26, 2001 11:09 AM To: MS-Exchange Admin Issues Subject: RE: attribute to remove user when importing The mail should just go away. Any objects without pointers to other mailboxes or PF's should be deleted and the space reclaimed with the next maintenance cycle. John Matteson; Exchange Manager Geac Corporate Infrastructure Systems and Standards (404) 239 - 2981 The ultimate weakness of violence is that it is a descending spiral; begetting the very thing it seeks to destroy. Instead of diminishing evil, it multiplies it... Through violence you may murder the hater, but you do not murder hate. In fact, violence merely increases hate...Returning violence for violence multiplies violence, adding deeper darkness to a night already devoid of stars. Darkness cannot drive out hate; only love can do that. -- Rev. Dr. Martin Luther King, Jr. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, October 26, 2001 11:47 AM To: MS-Exchange Admin Issues Subject: RE: attribute to remove user when importing What happens to the data in the Store when this method of deleting Objects is used? In our environment, exch5.5 sp4, when a mailbox is deleted, without cleaning the mailbox, the store never dumps the mailbox data. Is that the case using this import method of deleting Objects? -Original Message- From: STACKHOUSE, TODD -CONT [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 25, 2001 2:58 PM To: MS-Exchange Admin Issues Subject: RE: attribute to remove user when importing Yes, you need to add Mode as the second field in the import file and the entry as delete. To remove a mailbox you would use the following Object-Class,Mode,Directory Name Mailbox,delete,name -Original Message- From: Dan Aalberg [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 25, 2001 1:27 PM To: MS-Exchange Admin Issues Subject: attribute to remove user when importing hello all, I need to be able to remove mailboxes and custom recipients when doing an import, either from the Admin or from bulk import. Q152854 describes using the ~DEL command in a field to remove its value, but I can't find anything on removing the entire object. I've been using import/export for years, but never this way. Q155414 has no pointers either. Exchange 5.5 thanks for any help. Dan List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm +++The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document.+++ List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm +++The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this document.+++ List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange 5.5/Arcserve backup
I am a fully signed up member of the CA bashing bandwagon and for the same reason as William, I have to use their products every day. The ArcserveIT Exchange agent at our HQ has never ever given me a clean backup in a year, there is always an error message or some small glitch. I do restore fairly regularly so it does work (although it's very tricky to restore as well) but it's so inconsistent. There is a Service Pack 2 for ArcserveIT 6.61 which I assume you are using? You can get it from the CA site or I can mail it to you (11MB zip file), you have to run it on both the backup server and the server with the agent on it. James. Warning: Unhelpful, but very therapeutic, rant: I don't have much in the way of useful assistance here, other than, don't use ArcServeIT. The exchange agent is crap. It's worse than a buttload of POP connectors. Is this opinion from the bandwagon of Computer Associates bashers? No, it's from using the poorly written product for a few years. I no longer support nor intend to jeopardize important information such as email with any CA product as a result of working with the Exchange Agents. They do make some good software, but not in this department. Again, though ignored multiple times before, I invite Computer Associates to join this forum of peers and defend their applications to the people that actually use them. Because, last I checked there is no Computer Associates MVP programme, and frankly you don't have enough money to afford me to look up the answer. Otherwise, it would seem you need sufficient rights to install this software, and you don't have such. Some thoughts... Exchange server 5.5 SP2 Why only sp2? I hope you at least have the post-sp2 IMS fixes applied or you do not have this connected to the internet. I suspect the Exchange Administrator account is corrupted. Not the likely target. I logged into the Service Account and made sure I was Administrator there too. I'm not sure I understand that. When I tried to install A/V software I couldn't log in as Exchange Administrator either. That must have been the other frustrating piece of crap software known as EjaculateIT. Personally, I'd go with grisoft's product (www.grisoft.com), as Warren has done, if I could. The above thoughts are solely my own. William Lefkovics, MCSE, A+, ExchangeMVP -Original Message- From: Warren Walker [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 6:12 AM To: MS-Exchange Admin Issues Subject: Exchange 5.5/Arcserve backup Can anybody offer any words of wisdom on this? -Original Message- From: Warren Walker [mailto:[EMAIL PROTECTED]] Sent: October 29, 2001 7:46 AM To: MS-Exchange Admin Issues Subject: ARCSERVE for IBM 1/2 DAT 35/70MB drive...Administrator rights on Exchange 5.5. I can't seem to get ARCServe to back up my (WINNT 4.0 SP6) Exchange server 5.5 SP2 data files. I get an error message that tells me that the files were not copied onto tape and that I should check to make sure I have Administrator rights on the files. I tried to log into Exchange Server under the same administrator password and there's no problem. I logged into the Service Account and made sure I was Administrator there too. But, When I tried to install A/V software I couldn't log in as Exchange Administrator either. Where do I look to resolve my password problems? I suspect the Exchange Administrator account is corrupted. Also, one of my users lost his word functionality and even though I've scanned his machine with two different antivirus programs, I can't find any viruses or worms, which brings me back to Exchange Server. Unfortunately, I can't install an A/V program for MS-exchange until I resolve the Exchange Administrator account which won't let me install the A/V software. Any ideas? Thanks in advance. Warren Walker List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exch5.5 and Linux firewall
We've got one herevery good, but not cheap. -Original Message- From: Bob Peitzke [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 00:48 To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall Just get a Nokia firewall appliance that comes with CheckPoint Firewall-1 4.1. It's OS is a stripped-down version of BSD Unix, and even a dummy like me can manage the firewall through its GUI interface. Very secure, very reliable. We got the IP 330 model with 3 interfaces for private, public DMZ. Works great. HTH Bob Peitzke -Original Message- From: Lefkovics, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:19 PM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall There is only one. www.openbsd.org Well... there's only one that's close. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall I am still waiting for a secure OS - could you point me in that direction. I need one badly. If I had a secure OS I could spend 5-8% of my work time sleeping. ellery -Original Message- From: Lefkovics, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 10:54 AM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall your Linux Firewall or if you'd prefer, a firewall on a secure OS. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 6:16 AM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall Yes unless your smtp mail is coming in on a different port (which is very unlikely). Depending on your firewall I would have port 25 be able to go to that specific computer ipaddress. If you plan to run OWA you can still use SSL and port 443 with a Linux firewall. Not to get into an argument but MS Proxy is not really and firewall and your Linux Firewall will probably increase your security 90% or more. ellery july Technical Lead Northwest Area Foundation 332 Minnesota e-1201 St. Paul, MN 55101 email - [EMAIL PROTECTED] phone - 651-225-3895 fax - 651-225-7695 -Original Message- From: Fred Valdez [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 6:03 PM To: MS-Exchange Admin Issues Subject: Exch5.5 and Linux firewall Hello All, Does anyone have experience with exchange 5.5 behind a Linux firewall? I would like to use the firewall the same way ms proxy 2.0 is used. Basically, do I have to open port 25 on Linux and have it rout that traffic to exchange?... thanks, Fred Valdez GSRINC Network Administrator List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: SBS exchange license problems
I disable license manager on all my machines as it is a pain in the ass -Original Message- From: Rauno Muilu [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 08:02 To: MS-Exchange Admin Issues Subject: SBS exchange license problems Hi all, I have a mysterious problem with SBS exchange licensing. I have upgraded SBS to 4.5 more than year ago. After that I have purchased more client licenses. Previously I had 10 client license, now I have 30 client license. The problem is that I'm out of exchange licenses almost all the time. When I connect to DC server from other nt server with license manager (it is not possible with Sbs server) I see that there still are entry for old exchange version 5.0 and it looks that the exchange is counting licenses from that amount (10). It is not possible to modify that entry in license manager. How can I remove the exchange 5.0 entry from license manager ? Or is there any other way to fix the problem ? Thanks in advance ! Rauno List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Email Delayed Internally !
A user has just received an internal email that was sent 15 days ago !! Has anyone seen this before or any ideas on how this could happen? We are running Groupshield but there was nothing in the email except an legitimate URL Iain Rhodes t: 020 7393 1329 f: 020 7436 4789 www.pricejam.com 'pricejam to go' Our website in the palm of your hand -PDA users can subscribe at www.pricejam.com The information in this email and in any attachments is confidential and intended solely for the attention and use of the named addressee(s).Internet communications are not secure and therefore pricejamieson does not accept legal responsibility for the contents of this message. Any views or opinions expressed are solely those of the author and do not necessarily represent those of pricejamieson unless otherwise specifically stated. This e-mail message has been scanned and cleared by Network Associates Total Virus Defence http://www.nai.com List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: SBS exchange license problems
Disable licence manager. It is a pain in the bum! -Original Message- From: Rauno Muilu [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 08:02 To: MS-Exchange Admin Issues Subject: SBS exchange license problems If this email has any attachments then send it onto the IT Help Desk for virus checking Hi all, I have a mysterious problem with SBS exchange licensing. I have upgraded SBS to 4.5 more than year ago. After that I have purchased more client licenses. Previously I had 10 client license, now I have 30 client license. The problem is that I'm out of exchange licenses almost all the time. When I connect to DC server from other nt server with license manager (it is not possible with Sbs server) I see that there still are entry for old exchange version 5.0 and it looks that the exchange is counting licenses from that amount (10). It is not possible to modify that entry in license manager. How can I remove the exchange 5.0 entry from license manager ? Or is there any other way to fix the problem ? Thanks in advance ! Rauno List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the person responsible for delivering the email to the intended recipient, please immediately notify the Muir Group IT Help Desk on +44 (0) 1244 606139 List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: How many of you use Message Level Recovery ?
We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there), nor make your normal non-brick-level backups less reliable. They do, however, use more tape, make your backup jobs take more time and wear your tape drive out faster. They give you a false sense of security that you can get something back when in fact you may not. And you often cannot get everything back from a brick level backup. Brick Level Backup is a kludgy crutch for administrators who insist on managing their Exchange systems as if they were cc:Mail or MS Mail systems. They want the benefits of a database e-mail architecture, but want to manage it as if it were a file-based system. If you follow the Ed Crowley Never Restore Method®, you can remain secure in the knowledge that you'll almost never need to do a Brick Level Restore. If, for some rare event you find that you need to restore a message or mailbox, then you have a great opportunity to practice your disaster recovery techniques on your recovery server. What? You don't have a recovery server? Well, you need one whether or not you use Brick Level Backup. In a nutshell, Brick Level Backups aren't evil. But they're completely superfluous. -Ed Crowley MCSE+Internet MVP ** -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I was thinking about how people seem to read the Bible a whole lot more as they get older, then it dawned on me...they were cramming for their finals... - -Original Message- From: Kumar, Ashish [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:08 PM To: MS-Exchange Admin Issues Subject: How many of you use Message Level Recovery ? Hi all, have seen some interesting discussions on this forum, and Id like to as a very basic question(this is not for market research. What are your experiences with single message recovery, or mailbox recovery from products like legato, ultrabac, veritas, commvault etc ? Do you actually use it, how much and how often ? Is this a very basic
RE: Email Delayed Internally !
Was it mail from outside your system? If so, are you using IMS or a third party POP3 connector? We've seen some of the 3rd party products bury mail in a black hole until something shakes it loose (typically a server reboot). mit freundlichen Grüßen,(Best Regards), Steve Ropiak ZF Group NAO CERT, Exchange and Bar Code Administrator -Original Message-From: Iain Rhodes [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 5:56 AMTo: MS-Exchange Admin IssuesSubject: Email Delayed Internally ! A user has just received an internal email that was sent 15 days ago !! Has anyone seen this before or any ideas on how this could happen? We are running Groupshield but there was nothing in the email except an legitimate URL Iain Rhodes t: 020 7393 1329 f: 020 7436 4789 www.pricejam.com 'pricejam to go' Our website in the palm of your hand -PDA users can subscribe at www.pricejam.com The information in this email and in any attachments is confidential and intended solely for the attention and use of the named addressee(s).Internet communications are not secure and therefore pricejamieson does not accept legal responsibility for the contents of this message. Any views or opinions expressed are solely those of the author and do not necessarily represent those of pricejamieson unless otherwise specifically stated. This e-mail message has been scanned and cleared by Network Associates Total Virus Defence http://www.nai.com List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Email Delayed Internally !
Should NEVER switch to decaf mid week. Just reread the post, it was an internal mail. Are you sure the mail was sent that long ago and not just an incorrect date/time on the sender's computer? mit freundlichen Grüßen,(Best Regards), Steve Ropiak ZF Group NAO CERT, Exchange and Bar Code Administrator -Original Message-From: Iain Rhodes [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 5:56 AMTo: MS-Exchange Admin IssuesSubject: Email Delayed Internally ! A user has just received an internal email that was sent 15 days ago !! Has anyone seen this before or any ideas on how this could happen? We are running Groupshield but there was nothing in the email except an legitimate URL Iain Rhodes t: 020 7393 1329 f: 020 7436 4789 www.pricejam.com 'pricejam to go' Our website in the palm of your hand -PDA users can subscribe at www.pricejam.com The information in this email and in any attachments is confidential and intended solely for the attention and use of the named addressee(s).Internet communications are not secure and therefore pricejamieson does not accept legal responsibility for the contents of this message. Any views or opinions expressed are solely those of the author and do not necessarily represent those of pricejamieson unless otherwise specifically stated. This e-mail message has been scanned and cleared by Network Associates Total Virus Defence http://www.nai.com List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exch5.5 and Linux firewall
Save the money, stick with your linux firewall. Setup sendmail to relay the mail to and from your internal exchange server for your domains, its not difficult. Port forwarding as mentioned below works, but nowhere near as nicely - you'd probably need to masquerade the incoming connections and you wouldn't get half the benefits from the firewall, including the ultra-handy logging info. Cheers, Marty -Original Message- From: Robin Lawrie [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:47 PM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall We've got one herevery good, but not cheap. -Original Message- From: Bob Peitzke [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 00:48 To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall Just get a Nokia firewall appliance that comes with CheckPoint Firewall-1 4.1. It's OS is a stripped-down version of BSD Unix, and even a dummy like me can manage the firewall through its GUI interface. Very secure, very reliable. We got the IP 330 model with 3 interfaces for private, public DMZ. Works great. HTH Bob Peitzke -Original Message- From: Lefkovics, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:19 PM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall There is only one. www.openbsd.org Well... there's only one that's close. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall I am still waiting for a secure OS - could you point me in that direction. I need one badly. If I had a secure OS I could spend 5-8% of my work time sleeping. ellery -Original Message- From: Lefkovics, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 10:54 AM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall your Linux Firewall or if you'd prefer, a firewall on a secure OS. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 6:16 AM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall Yes unless your smtp mail is coming in on a different port (which is very unlikely). Depending on your firewall I would have port 25 be able to go to that specific computer ipaddress. If you plan to run OWA you can still use SSL and port 443 with a Linux firewall. Not to get into an argument but MS Proxy is not really and firewall and your Linux Firewall will probably increase your security 90% or more. ellery july Technical Lead Northwest Area Foundation 332 Minnesota e-1201 St. Paul, MN 55101 email - [EMAIL PROTECTED] phone - 651-225-3895 fax - 651-225-7695 -Original Message- From: Fred Valdez [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 6:03 PM To: MS-Exchange Admin Issues Subject: Exch5.5 and Linux firewall Hello All, Does anyone have experience with exchange 5.5 behind a Linux firewall? I would like to use the firewall the same way ms proxy 2.0 is used. Basically, do I have to open port 25 on Linux and have it rout that traffic to exchange?... thanks, Fred Valdez GSRINC Network Administrator List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: How many of you use Message Level Recovery ?
Don't do it. There's only so much overtime one man can do, and my quota's fully taken by using AarghServe :o) -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 11:04 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there), nor make your normal non-brick-level backups less reliable. They do, however, use more tape, make your backup jobs take more time and wear your tape drive out faster. They give you a false sense of security that you can get something back when in fact you may not. And you often cannot get everything back from a brick level backup. Brick Level Backup is a kludgy crutch for administrators who insist on managing their Exchange systems as if they were cc:Mail or MS Mail systems. They want the benefits of a database e-mail architecture, but want to manage it as if it were a file-based system. If you follow the Ed Crowley Never Restore Method®, you can remain secure in the knowledge that you'll almost never need to do a Brick Level Restore. If, for some rare event you find that you need to restore a message or mailbox, then you have a great opportunity to practice your disaster recovery techniques on your recovery server. What? You don't have a recovery server? Well, you need one whether or not you use Brick Level Backup. In a nutshell, Brick Level Backups aren't evil. But they're completely superfluous. -Ed Crowley MCSE+Internet MVP ** -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I was thinking about how people seem to read the Bible a whole lot more as they get older, then it dawned on me...they were cramming for their finals... - -Original Message- From: Kumar, Ashish [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:08 PM To: MS-Exchange Admin Issues Subject: How many of you use Message Level Recovery ? Hi all, have seen some interesting discussions
Prevent sending attachments
Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: [Fixed] RE: Exchange 2000 Backup permissions?
Sorry, I must have missed part of this thread (or deleted it). What is the deal with the Exchange Client dll from version 5.5? what is it doing to stop the backups? I have just done a migration to 2000 and am having problems getting a decent backup -Original Message- From: Marty Richards [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:12 AM To: MS-Exchange Admin Issues Subject: [Fixed] RE: Exchange 2000 Backup permissions? Cool. The problem was an exchange 5.5 dll called edbbcli.dll in the winnt\system32 directory. Renamed this and the backup is running now... well, NTBackup is, I haven't tried veritas yet. Cheers, Marty -Original Message- From: Marty Richards Sent: Wednesday, October 31, 2001 4:04 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 Backup permissions? Did that too - currently have 6.3Gb on the data volume and 1.2Gb on the system. The logs and edb's are on data. Thanks ;) Cheers, Marty -Original Message- From: Matt Bullock [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:48 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 Backup permissions? Try freeing up some space on the drive. -Original Message- From: Marty Richards [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 8:43 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 Backup permissions? current memberships of the backup2 account are Backup Operators Domain Users Exchange Domain Servers Server Operators Its still denied ;( Cheers, Marty -Original Message- From: Tipirneni Prasad [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:29 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 Backup permissions? create a new user and add to the Backup operators group and also make the user to the domain admin group this will work I am running online backups for E2k sp1 on Win2k sp2 -Original Message- From: Marty Richards [mailto:[EMAIL PROTECTED]] Sent: Wednesday, 31 October 2001 3:25 PM To: MS-Exchange Admin Issues Subject: Exchange 2000 Backup permissions? Hi All, I have a weird one. I inherited this one around 20 hours ago. Its Exchange 2k (build 4417.5 - what SP is that?) on Win2k server SP1. The server has not been backed up since March 2000, if at all. The priv.edb is 3.5Gb, the log files are 15.5Gb - they ran out of drive space yesterday. Backup Exec gives access denied to directory when trying to backup the information store. NTBackup completes in 1 sec and skips all files, saying they cannot be restored. BE runs as local system on the same machine. I tried creating a new user, adding it to Exchange Servers group and fed it to backup exec - same error. I also tried - for troubleshooting purposes - delegating full control of the exchange organisation to the everyone group with no luck. I have reversed these changes. Any thoughts on where I should look? I suspect active directory might be broken - I don't know the history to be sure. Cheers, Marty List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Can't open OUTLOOK via Internet after migrate to Win2000
Dear guys: Before migrate to Windows 2000 AD, users can open their OUTLOOK via Internet. l Exchange 5.5 NT 4.0 BDC with internet connection IP. Users can connect to this mail server and open OUTLOOK just like in the office. After migrate to Windows 2000 AD, users get server name resolution problem in connect to Exchange server. l Exchange 5.5 Windows 2000 member server with internet connection IP. When you type the Exchange server FQDN user's mailbox name in the Outlook profile and click "Check Names", the server name will automatically be "shorten". Only keep the host name, not the FQDN. This situation happens both before and after migrates to Windows 2000. However, when the Exchange server is NT 4.0 BDC, it works. But failed when it upgrade to Windows 2000 member server. Now I have to add the Exchange server Host name and Internet IP at user's Hosts file to connect to the mail server via Internet. Any one has better way to fix the Name resolution problem? * Have a Nice Day ! Kevin Lin Advantech, Taiwan [EMAIL PROTECTED] *** List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Re: 552 Header Line is ridiculously overlong
Sorry just a bit more info about the NDR, it comes back listing each recipient like so: The following recipient(s) could not be reached: Bob Smith (E-mail) on 31/10/01 10:49 Unable to deliver the message due to a communications failure The MTS-ID of the original message is: c=GB;a= ;p=ORG;l=MAIL_SERVER-011031104908Z-8524 MSEXCH:IMS:ORG:SITE:MAIL_SERVER 3552 (000B099C) 552 Header line is ridiculously overlong Thanks, James. Dear all, One of our users is receiving this NDR (as am I as the IMS Admin) when he tries to send an e-mail to Mailshot distribution list he created. First he added each individual name in the 'To' field and it failed. Then we created a distribution list (actually 2 of them to split them up) and it failed again. There are around 160 e-mail addresses in total. Technet is no help, a search on google found a couple of articles but they were a bit vague, due to one article we also tried putting the list into the CC field but alas this was also in vain. There are no restrictions on the users mailbox either. The server is 5.5 sp3 by the way. Any ideas my fellow Exchange administrators? Thanks. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: 552 Header Line is ridiculously overlong
Hi James This happens when the header is more that 8192 bytes long and is by design. I suggest that the user use bcc to send the mails off. Cheers -Original Message- From: James Gosnold [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 12:04 To: MS-Exchange Admin Issues Subject: Re: 552 Header Line is ridiculously overlong Sorry just a bit more info about the NDR, it comes back listing each recipient like so: The following recipient(s) could not be reached: Bob Smith (E-mail) on 31/10/01 10:49 Unable to deliver the message due to a communications failure The MTS-ID of the original message is: c=GB;a= ;p=ORG;l=MAIL_SERVER-011031104908Z-8524 MSEXCH:IMS:ORG:SITE:MAIL_SERVER 3552 (000B099C) 552 Header line is ridiculously overlong Thanks, James. Dear all, One of our users is receiving this NDR (as am I as the IMS Admin) when he tries to send an e-mail to Mailshot distribution list he created. First he added each individual name in the 'To' field and it failed. Then we created a distribution list (actually 2 of them to split them up) and it failed again. There are around 160 e-mail addresses in total. Technet is no help, a search on google found a couple of articles but they were a bit vague, due to one article we also tried putting the list into the CC field but alas this was also in vain. There are no restrictions on the users mailbox either. The server is 5.5 sp3 by the way. Any ideas my fellow Exchange administrators? Thanks. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: [Fixed] RE: Exchange 2000 Backup permissions?
Title: RE: [Fixed] RE: Exchange 2000 Backup permissions? Thanks, this could be very useful in tracking down my problems SB -Original Message- From: Marty Richards [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 11:48 AM To: MS-Exchange Admin Issues Subject: RE: [Fixed] RE: Exchange 2000 Backup permissions? It seems: The Exchange 5.5 version of the dll needs to be in the path for NTBackup to support Exchange 5.5 The Exchange 2k version of the dll lives in exchange\bin and needs a key in the registry for NTBackup to support Exchange 2k. If you have both the 5.5 dll in the path and the 2k dll in the registry NTbackup shows both Microsoft Exchange and Microsoft Exchange Server targets in the backup selection list. If you select a 2k exchange store to backup NTBackup seems to use the 5.5 dll to access it, skips the target and returns unrestorable/corrupt database errors. If you rename the 5.5 dll, one of the exchange targets disappears from NTbackup and it works. Cheers, Marty -Original Message- From: STEVE BROOK [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 10:34 PM To: MS-Exchange Admin Issues Subject: RE: [Fixed] RE: Exchange 2000 Backup permissions? Sorry, I must have missed part of this thread (or deleted it). What is the deal with the Exchange Client dll from version 5.5? what is it doing to stop the backups? I have just done a migration to 2000 and am having problems getting a decent backup -Original Message- From: Marty Richards [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:12 AM To: MS-Exchange Admin Issues Subject: [Fixed] RE: Exchange 2000 Backup permissions? Cool. The problem was an exchange 5.5 dll called edbbcli.dll in the winnt\system32 directory. Renamed this and the backup is running now... well, NTBackup is, I haven't tried veritas yet. Cheers, Marty List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: SBS exchange license problems
Hi, One more stupid question; how do I disable license manager ? regards Rauno -Original Message- From: Steve Roberts [mailto:[EMAIL PROTECTED]] Sent: 31. lokakuuta 2001 12:58 To: MS-Exchange Admin Issues Subject: RE: SBS exchange license problems Disable licence manager. It is a pain in the bum! -Original Message- From: Rauno Muilu [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 08:02 To: MS-Exchange Admin Issues Subject: SBS exchange license problems If this email has any attachments then send it onto the IT Help Desk for virus checking Hi all, I have a mysterious problem with SBS exchange licensing. I have upgraded SBS to 4.5 more than year ago. After that I have purchased more client licenses. Previously I had 10 client license, now I have 30 client license. The problem is that I'm out of exchange licenses almost all the time. When I connect to DC server from other nt server with license manager (it is not possible with Sbs server) I see that there still are entry for old exchange version 5.0 and it looks that the exchange is counting licenses from that amount (10). It is not possible to modify that entry in license manager. How can I remove the exchange 5.0 entry from license manager ? Or is there any other way to fix the problem ? Thanks in advance ! Rauno List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the person responsible for delivering the email to the intended recipient, please immediately notify the Muir Group IT Help Desk on +44 (0) 1244 606139 List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: SBS exchange license problems
Go to Control Panel, then Services (NT4) and stop and disable the service. In Win2K, open up the Computer Management Console, expand Services and Application and then select Services. Stop and Disable the License Logging Service. -Original Message- From: Rauno Muilu [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 12:42 To: MS-Exchange Admin Issues Subject: RE: SBS exchange license problems Hi, One more stupid question; how do I disable license manager ? regards Rauno -Original Message- From: Steve Roberts [mailto:[EMAIL PROTECTED]] Sent: 31. lokakuuta 2001 12:58 To: MS-Exchange Admin Issues Subject: RE: SBS exchange license problems Disable licence manager. It is a pain in the bum! -Original Message- From: Rauno Muilu [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 08:02 To: MS-Exchange Admin Issues Subject: SBS exchange license problems If this email has any attachments then send it onto the IT Help Desk for virus checking Hi all, I have a mysterious problem with SBS exchange licensing. I have upgraded SBS to 4.5 more than year ago. After that I have purchased more client licenses. Previously I had 10 client license, now I have 30 client license. The problem is that I'm out of exchange licenses almost all the time. When I connect to DC server from other nt server with license manager (it is not possible with Sbs server) I see that there still are entry for old exchange version 5.0 and it looks that the exchange is counting licenses from that amount (10). It is not possible to modify that entry in license manager. How can I remove the exchange 5.0 entry from license manager ? Or is there any other way to fix the problem ? Thanks in advance ! Rauno List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm This email and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the person responsible for delivering the email to the intended recipient, please immediately notify the Muir Group IT Help Desk on +44 (0) 1244 606139 List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Pix Firewall
Title: Message Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PMTo: MS-Exchange Admin IssuesSubject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, JonathanList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
The only thing that comes to mind is a decent Exchange Antivirus Scanner with attachment blocking enabled. It won't stop people from sending the file, but the Antivirus Scanner will strip the file out of the message. TrendMicro Scanmail for Exchange comes to mind (though others on the list have other favorites) The clear consensus on the list is to stear clear of any CA product. -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 03:35 To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
I use Antigen to remove attachments that my company deems not work related. It also is a damn good antivirus scanner as well. I run it on Exchange 5.5. Mark -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Pix Firewall
Title: Message Are your DNS records (forwarding) good i.e. is your MX record being populated well? ß this is a weird question to ask but just checking a low chance hunch. Is the mail being stopped on the exchange server or held in the senders mailbox? Can you telnet or ping from your box to the outside world using port 25 and/or 110? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:55 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PM To: MS-Exchange Admin Issues Subject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, Jonathan List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Eseutil
Title: Message Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange 2000 connect to sendmail
I can now telnet from exchange to send mail but not from send mail to exchange. -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 4:35 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail What happens when you try the telnet session from Exchange to Sendmail? Does it connect at all? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 3:33 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail I can telnet from the send mail server to exchange but not exchange to send mail. I can ping each server from the servers -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 4:14 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail Can you ping Exchange from Sendmail and vice-versa by DNS name, and have you tried using telnet to port 25 from Exchange to Sendmail? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 2:53 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail The exchange server is looking at both dns servers (win2k servers), however are send mail server is looking at the firewall(raptor) for it's dns. -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 3:33 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail Is there only one dns server, and are the Exchange and Sendmail servers both using that DNS? In it IP configuration of the Exchange server, is there only one dns server listed? Have you tried sending mail to the Sendmail server from a telnet session on the Exchange box, and vice versa? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 2:27 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail I have both servers in the dns records.What else should I check for in dns -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 2:17 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail How is DNS configured on the WIN2K server? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 1:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2000 connect to sendmail Help I am trying to connect exchange 2000 to our sendmail server forward mail from the sendmail server to the exchange server. I had this working for 2 days.I didn't change anything one of the connectors must have broke. I can't figure this out has anyone else had this problem. Before you ask why. We are looking at implementing exchange company wide, but before we do we are going to test a few users on exchange. This way I can cost justify it after they see what exchange has to offer. Brien Mayer Network Administrator Merchant's Tire mailto:[EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Domain type stuck in IMS
I sent a note yesterday regarding a particular domain (earthlink.net) stuck in the IMS. It seems that it is not just one domain, but one domain type sitting in the outbound queue. The emails stuck are all .net domain types. Anyone else experience this? List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: 552 Header Line is ridiculously overlong
Google Search comes up with [EXIM] [Followup] Explanation please: 552 Header line is ... ... 552 Header line is ridiculously overlong. ... for the explanations of the '552' error. Is the limit of ... the length of a headerline, some could attack your ... www.exim.org/pipermail/exim-users/Week-of-Mon-19990524/012687.html - 4k - Cached - Similar pages -Original Message- From: James Gosnold [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:04 AM To: MS-Exchange Admin Issues Subject: Re: 552 Header Line is ridiculously overlong Sorry just a bit more info about the NDR, it comes back listing each recipient like so: The following recipient(s) could not be reached: Bob Smith (E-mail) on 31/10/01 10:49 Unable to deliver the message due to a communications failure The MTS-ID of the original message is: c=GB;a= ;p=ORG;l=MAIL_SERVER-011031104908Z-8524 MSEXCH:IMS:ORG:SITE:MAIL_SERVER 3552 (000B099C) 552 Header line is ridiculously overlong Thanks, James. Dear all, One of our users is receiving this NDR (as am I as the IMS Admin) when he tries to send an e-mail to Mailshot distribution list he created. First he added each individual name in the 'To' field and it failed. Then we created a distribution list (actually 2 of them to split them up) and it failed again. There are around 160 e-mail addresses in total. Technet is no help, a search on google found a couple of articles but they were a bit vague, due to one article we also tried putting the list into the CC field but alas this was also in vain. There are no restrictions on the users mailbox either. The server is 5.5 sp3 by the way. Any ideas my fellow Exchange administrators? Thanks. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Pix Firewall
Title: Message Dns records are forwarding and MX record is being populated. I can telnet out on port 25. It seems to me that the mail is being stopped at the exchange server. I can send mail in fine just outbound doesn't work. I haven't disabled the fixup yet I am going to try that next. -Original Message-From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:28 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Are your DNS records (forwarding) good i.e. is your MX record being populated well? this is a weird question to ask but just checking a low chance hunch. Is the mail being stopped on the exchange server or held in the senders mailbox? Can you telnet or ping from your box to the outside world using port 25 and/or 110? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 6:55 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PMTo: MS-Exchange Admin IssuesSubject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, Jonathan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exch5.5 and Linux firewall
My philosophy that if you have only one exchange server, two or less sites, one T1 or less, and one way out to the Internet you do not need an expensive or complicated firewall (PIX, Nokia/Checkpoint). If you are handy build a Linux Firewall if not get a watchgaurd or sonicwall. This philosophy is cheaper, better, and easier for small to midsize organizations to manage. -Original Message- From: Robin Lawrie [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:47 AM To: MS-Exchange Admin Issues Subject:RE: Exch5.5 and Linux firewall We've got one herevery good, but not cheap. -Original Message- From: Bob Peitzke [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 00:48 To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall Just get a Nokia firewall appliance that comes with Checkpoint Firewall-1 4.1. It's OS is a stripped-down version of BSD Unix, and even a dummy like me can manage the firewall through its GUI interface. Very secure, very reliable. We got the IP 330 model with 3 interfaces for private, public DMZ. Works great. HTH Bob Peitzke -Original Message- From: Lefkovics, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:19 PM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall There is only one. www.openbsd.org Well... there's only one that's close. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall I am still waiting for a secure OS - could you point me in that direction. I need one badly. If I had a secure OS I could spend 5-8% of my work time sleeping. ellery -Original Message- From: Lefkovics, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 10:54 AM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall your Linux Firewall or if you'd prefer, a firewall on a secure OS. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 6:16 AM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall Yes unless your smtp mail is coming in on a different port (which is very unlikely). Depending on your firewall I would have port 25 be able to go to that specific computer ipaddress. If you plan to run OWA you can still use SSL and port 443 with a Linux firewall. Not to get into an argument but MS Proxy is not really and firewall and your Linux Firewall will probably increase your security 90% or more. ellery july Technical Lead Northwest Area Foundation 332 Minnesota e-1201 St. Paul, MN 55101 email - [EMAIL PROTECTED] phone - 651-225-3895 fax - 651-225-7695 -Original Message- From: Fred Valdez [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 6:03 PM To: MS-Exchange Admin Issues Subject: Exch5.5 and Linux firewall Hello All, Does anyone have experience with exchange 5.5 behind a Linux firewall? I would like to use the firewall the same way ms proxy 2.0 is used. Basically, do I have to open port 25 on Linux and have it rout that traffic to exchange?... thanks, Fred Valdez GSRINC Network Administrator List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
SV: Prevent sending attachments
We are using Norman Virus Control. -Opprinnelig melding- Fra: Martin Blackstone [SMTP:[EMAIL PROTECTED]] Sendt:31. oktober 2001 14:35 Til: MS-Exchange Admin Issues Emne: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Auto creation of user profile
Thanks Kevin! I'll look into all of these today. Thanks for all the replies. DJ -Original Message- From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:12 AM To: MS-Exchange Admin Issues Subject: RE: Auto creation of user profile Try my createprf.exe tool as well! Trouble with profgen.exe (which uses newprof.exe) is it requires you to build config files which can be a bit troublesome. Createprf.exe builds the profile directly. Take a look! It's free! Download from www.mailsoftware.co.uk Kevin -Original Message- From: David James [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:35 To: MS-Exchange Admin Issues Subject: RE: Auto creation of user profile Never heard of it. MS product or 3rd party? Thanks Michele... DJ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 2:08 PM To: MS-Exchange Admin Issues Subject: RE: Auto creation of user profile profgen? -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I'll hold it and you light the fuse. - Famous Last Words - -Original Message- From: David James [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:08 PM To: MS-Exchange Admin Issues Subject: Auto creation of user profile Is there a way to have 2000 automatically configure the Exchange profile for a user after they log into the domain for the first time on a machine? DJ -- David James Infrastructure Administrator Generation Technologies Corporation V: 913-345-1012 x103 F: 913-345-0156 mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] MSN Messenger: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange 2000 connect to sendmail
Are you trying to telnet using ip address? Is this going across a firewall? Can you telnet into exchange from anywhere else? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 13:36 To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail I can now telnet from exchange to send mail but not from send mail to exchange. -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 4:35 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail What happens when you try the telnet session from Exchange to Sendmail? Does it connect at all? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 3:33 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail I can telnet from the send mail server to exchange but not exchange to send mail. I can ping each server from the servers -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 4:14 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail Can you ping Exchange from Sendmail and vice-versa by DNS name, and have you tried using telnet to port 25 from Exchange to Sendmail? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 2:53 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail The exchange server is looking at both dns servers (win2k servers), however are send mail server is looking at the firewall(raptor) for it's dns. -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 3:33 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail Is there only one dns server, and are the Exchange and Sendmail servers both using that DNS? In it IP configuration of the Exchange server, is there only one dns server listed? Have you tried sending mail to the Sendmail server from a telnet session on the Exchange box, and vice versa? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 2:27 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail I have both servers in the dns records.What else should I check for in dns -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 2:17 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail How is DNS configured on the WIN2K server? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 1:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2000 connect to sendmail Help I am trying to connect exchange 2000 to our sendmail server forward mail from the sendmail server to the exchange server. I had this working for 2 days.I didn't change anything one of the connectors must have broke. I can't figure this out has anyone else had this problem. Before you ask why. We are looking at implementing exchange company wide, but before we do we are going to test a few users on exchange. This way I can cost justify it after they see what exchange has to offer. Brien Mayer Network Administrator Merchant's Tire mailto:[EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Pix Firewall
Title: Message Did you check the mail queue to see if the mail is there? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:37 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Dns records are forwarding and MX record is being populated. I can telnet out on port 25. It seems to me that the mail is being stopped at the exchange server. I can send mail in fine just outbound doesn't work. I haven't disabled the fixup yet I am going to try that next. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:28 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Are your DNS records (forwarding) good i.e. is your MX record being populated well? ß this is a weird question to ask but just checking a low chance hunch. Is the mail being stopped on the exchange server or held in the senders mailbox? Can you telnet or ping from your box to the outside world using port 25 and/or 110? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:55 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PM To: MS-Exchange Admin Issues Subject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, Jonathan List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: How many of you use Message Level Recovery ?
You may wonder why we bother with BLB when we have such a long deleted item retention period: a)It is occasionally handy to restore an individual email without using a separate restore server b)Restoring an single email can be quicker - hero factor when someone's in trouble! c)Gives a belt and braces approach to backup But, but, but...! With such a long DIR period, you don't NEED BLB to do a), b), c)!!! ::confused:: No separate restore server is needed; and DIR is quick, quick, quick (vite, even!). re: c) -- my dentist said that braces probably wouldn't do me any good -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I am in shape. Round is a shape... - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:04 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there), nor make your normal non-brick-level backups less reliable. They do, however, use more tape, make your backup jobs take more time and wear your tape drive out faster. They give you a false sense of security that you can get something back when in fact you may not. And you often cannot get everything back from a brick level backup. Brick Level Backup is a kludgy crutch for administrators who insist on managing their Exchange systems as if they were cc:Mail or MS Mail systems. They want the benefits of a database e-mail architecture, but want to manage it as if it were a file-based system. If you follow the Ed Crowley Never Restore Method®, you can remain secure in the knowledge that you'll almost never need to do a Brick Level Restore. If, for some rare event you find that you need to restore a message or mailbox, then you have a great opportunity to practice your disaster recovery techniques on your recovery server. What? You don't have a recovery server? Well, you need one whether or not you use Brick Level
RE: Pix Firewall
Title: Message ya the mail is all sitting in the queue set to retry. -Original Message-From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:40 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Did you check the mail queue to see if the mail is there? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 7:37 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Dns records are forwarding and MX record is being populated. I can telnet out on port 25. It seems to me that the mail is being stopped at the exchange server. I can send mail in fine just outbound doesn't work. I haven't disabled the fixup yet I am going to try that next. -Original Message-From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:28 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Are your DNS records (forwarding) good i.e. is your MX record being populated well? this is a weird question to ask but just checking a low chance hunch. Is the mail being stopped on the exchange server or held in the senders mailbox? Can you telnet or ping from your box to the outside world using port 25 and/or 110? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 6:55 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PMTo: MS-Exchange Admin IssuesSubject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, Jonathan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange 5.5/Arcserve backup
You guys are great. Thanks for all the help. Warren -Original Message- From: James Gosnold [mailto:[EMAIL PROTECTED]] Sent: October 31, 2001 1:34 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 5.5/Arcserve backup I am a fully signed up member of the CA bashing bandwagon and for the same reason as William, I have to use their products every day. The ArcserveIT Exchange agent at our HQ has never ever given me a clean backup in a year, there is always an error message or some small glitch. I do restore fairly regularly so it does work (although it's very tricky to restore as well) but it's so inconsistent. There is a Service Pack 2 for ArcserveIT 6.61 which I assume you are using? You can get it from the CA site or I can mail it to you (11MB zip file), you have to run it on both the backup server and the server with the agent on it. James. Warning: Unhelpful, but very therapeutic, rant: I don't have much in the way of useful assistance here, other than, don't use ArcServeIT. The exchange agent is crap. It's worse than a buttload of POP connectors. Is this opinion from the bandwagon of Computer Associates bashers? No, it's from using the poorly written product for a few years. I no longer support nor intend to jeopardize important information such as email with any CA product as a result of working with the Exchange Agents. They do make some good software, but not in this department. Again, though ignored multiple times before, I invite Computer Associates to join this forum of peers and defend their applications to the people that actually use them. Because, last I checked there is no Computer Associates MVP programme, and frankly you don't have enough money to afford me to look up the answer. Otherwise, it would seem you need sufficient rights to install this software, and you don't have such. Some thoughts... Exchange server 5.5 SP2 Why only sp2? I hope you at least have the post-sp2 IMS fixes applied or you do not have this connected to the internet. I suspect the Exchange Administrator account is corrupted. Not the likely target. I logged into the Service Account and made sure I was Administrator there too. I'm not sure I understand that. When I tried to install A/V software I couldn't log in as Exchange Administrator either. That must have been the other frustrating piece of crap software known as EjaculateIT. Personally, I'd go with grisoft's product (www.grisoft.com), as Warren has done, if I could. The above thoughts are solely my own. William Lefkovics, MCSE, A+, ExchangeMVP -Original Message- From: Warren Walker [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 6:12 AM To: MS-Exchange Admin Issues Subject: Exchange 5.5/Arcserve backup Can anybody offer any words of wisdom on this? -Original Message- From: Warren Walker [mailto:[EMAIL PROTECTED]] Sent: October 29, 2001 7:46 AM To: MS-Exchange Admin Issues Subject: ARCSERVE for IBM 1/2 DAT 35/70MB drive...Administrator rights on Exchange 5.5. I can't seem to get ARCServe to back up my (WINNT 4.0 SP6) Exchange server 5.5 SP2 data files. I get an error message that tells me that the files were not copied onto tape and that I should check to make sure I have Administrator rights on the files. I tried to log into Exchange Server under the same administrator password and there's no problem. I logged into the Service Account and made sure I was Administrator there too. But, When I tried to install A/V software I couldn't log in as Exchange Administrator either. Where do I look to resolve my password problems? I suspect the Exchange Administrator account is corrupted. Also, one of my users lost his word functionality and even though I've scanned his machine with two different antivirus programs, I can't find any viruses or worms, which brings me back to Exchange Server. Unfortunately, I can't install an A/V program for MS-exchange until I resolve the Exchange Administrator account which won't let me install the A/V software. Any ideas? Thanks in advance. Warren Walker List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.292 / Virus Database: 157 - Release Date: 10/26/01 List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Eseutil
Title: Message I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Email Delayed Internally !
Title: Message Don't really have an answer for your, but I have had it happen here on more than one occasion and could never find a reason..it's a "feature" -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:06 AMTo: MS-Exchange Admin IssuesSubject: RE: Email Delayed Internally ! Decaf! - get off this list... Lots of possibilities, none easily tracked. Could it have been resent, or moved from the deleted folder to the outbox? Or it could just be another one of those FM things (M= Magic). Nothing like instilling confidence in the system. -Original Message-From: Ropiak Steve - NAO Florence Office Exchange and Bar Code Admn. [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 4:15 AMTo: MS-Exchange Admin IssuesSubject: RE: Email Delayed Internally ! Should NEVER switch to decaf mid week. Just reread the post, it was an internal mail. Are you sure the mail was sent that long ago and not just an incorrect date/time on the sender's computer? mit freundlichen Grüßen,(Best Regards), Steve Ropiak ZF Group NAO CERT, Exchange and Bar Code Administrator -Original Message-From: Iain Rhodes [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 5:56 AMTo: MS-Exchange Admin IssuesSubject: Email Delayed Internally ! A user has just received an internal email that was sent 15 days ago !! Has anyone seen this before or any ideas on how this could happen? We are running Groupshield but there was nothing in the email except an legitimate URL Iain Rhodes t: 020 7393 1329 f: 020 7436 4789 www.pricejam.com 'pricejam to go' Our website in the palm of your hand -PDA users can subscribe at www.pricejam.com The information in this email and in any attachments is confidential and intended solely for the attention and use of the named addressee(s).Internet communications are not secure and therefore pricejamieson does not accept legal responsibility for the contents of this message. Any views or opinions expressed are solely those of the author and do not necessarily represent those of pricejamieson unless otherwise specifically stated. This e-mail message has been scanned and cleared by Network Associates Total Virus Defence http://www.nai.com List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange 2000 connect to sendmail
Is the firewall between the Exchange and Sendmail servers? I'd test to be sure you can telnet to Sendmail from another node on the other side of the firewall, or even from the Sendmail server itself to verify the SMTP service is working properly. If you can do that then it's probably time to start looking at that firewall. -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:36 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail I can now telnet from exchange to send mail but not from send mail to exchange. -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 4:35 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail What happens when you try the telnet session from Exchange to Sendmail? Does it connect at all? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 3:33 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail I can telnet from the send mail server to exchange but not exchange to send mail. I can ping each server from the servers -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 4:14 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail Can you ping Exchange from Sendmail and vice-versa by DNS name, and have you tried using telnet to port 25 from Exchange to Sendmail? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 2:53 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail The exchange server is looking at both dns servers (win2k servers), however are send mail server is looking at the firewall(raptor) for it's dns. -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 3:33 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail Is there only one dns server, and are the Exchange and Sendmail servers both using that DNS? In it IP configuration of the Exchange server, is there only one dns server listed? Have you tried sending mail to the Sendmail server from a telnet session on the Exchange box, and vice versa? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 2:27 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail I have both servers in the dns records.What else should I check for in dns -Original Message- From: Campbell, Rob [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 2:17 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2000 connect to sendmail How is DNS configured on the WIN2K server? -Original Message- From: Brien Mayer [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 1:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2000 connect to sendmail Help I am trying to connect exchange 2000 to our sendmail server forward mail from the sendmail server to the exchange server. I had this working for 2 days.I didn't change anything one of the connectors must have broke. I can't figure this out has anyone else had this problem. Before you ask why. We are looking at implementing exchange company wide, but before we do we are going to test a few users on exchange. This way I can cost justify it after they see what exchange has to offer. Brien Mayer Network Administrator Merchant's Tire mailto:[EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message it's a nice thought.it'd take a hell of a lot of doing thoughyou'd be looking at opening every single attachment that comes through, and analysing it to determine what file type it isCan't see that having a good effect on performance... -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Pix Firewall
Title: Message GAROWNTEED it's the fix-up protocol that Don stated in the first response. Once disabled it'll work IN--OUTBOUND just fine. I've correct this on 1/2 dozen PIX's. It's a CISCO PIX issue. Of course CISCO enthusiasts will tell you it's a Exchange ESMTP issue as "they say" only Exchange has this problem. Either way disabling FIXUP corrects it and since CISCO won't fix it you're not left with many alternatives short of eliminating the PIX all together. -Rick -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 6:10 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall ya the mail is all sitting in the queue set to retry. -Original Message-From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:40 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Did you check the mail queue to see if the mail is there? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 7:37 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Dns records are forwarding and MX record is being populated. I can telnet out on port 25. It seems to me that the mail is being stopped at the exchange server. I can send mail in fine just outbound doesn't work. I haven't disabled the fixup yet I am going to try that next. -Original Message-From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:28 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Are your DNS records (forwarding) good i.e. is your MX record being populated well? ß this is a weird question to ask but just checking a low chance hunch. Is the mail being stopped on the exchange server or held in the senders mailbox? Can you telnet or ping from your box to the outside world using port 25 and/or 110? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 6:55 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PMTo: MS-Exchange Admin IssuesSubject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, Jonathan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message thats what i want, but currently i cant find software do block it like that. i can block .exe files, but if you send me an exe file renamed to .MSN, that file still comes thru. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:50 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message Definitely. It's all too easy to change the extension of a file so it's allowed through a virus scanner/mail management software when it shouldn't be, and then renamed at the other end. We have a similar problem on our file server. We've prohibited people from saving particular files, such as mp3, but they can all bypass it by changing the extension of the file to .zip or .doc. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Pix Firewall
Title: Message I've sent this out before.. but here's another nice way of checking yourself from the outside world. http://www.zmailer.org/mxverify.html -Original Message-From: Purviance, Chad [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 6:47 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall You said you can Telnet out on Port 25 but you didn't say if it was by name. IE check the DNS on outbound. The messages in Queue have a failure status. What is it?? IE Host unknown, network error, didn't send cash to BillG?? This will usually show you more of what is going on. The SMTP fix-up will kill you on Exchange to Exchange SMTP connections, but not non-exchange. Kill it or but a non ESMTP server in front as a relay like IIS. Try TELNET 209.43.20.203 25 Then Try TELNET MAIL.IQUEST.NET 25 The responses should be 220 iquest3.iquest.net ESMTP If the first works and not the second, you probably have a DNS issue on the Exchange server. Chad P. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:10 AMTo: [EMAIL PROTECTED]Subject: RE: Pix Firewall ya the mail is all sitting in the queue set to retry. -Original Message-From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:40 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Did you check the mail queue to see if the mail is there? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 7:37 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Dns records are forwarding and MX record is being populated. I can telnet out on port 25. It seems to me that the mail is being stopped at the exchange server. I can send mail in fine just outbound doesn't work. I haven't disabled the fixup yet I am going to try that next. -Original Message-From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:28 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Are your DNS records (forwarding) good i.e. is your MX record being populated well? ß this is a weird question to ask but just checking a low chance hunch. Is the mail being stopped on the exchange server or held in the senders mailbox? Can you telnet or ping from your box to the outside world using port 25 and/or 110? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 6:55 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PMTo: MS-Exchange Admin IssuesSubject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, Jonathan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ
RE: Pix Firewall
Title: Message You said you can Telnet out on Port 25 but you didnt say if it was by name. IE check the DNS on outbound. The messages in Queue have a failure status. What is it?? IE Host unknown, network error, didnt send cash to BillG?? This will usually show you more of what is going on. The SMTP fix-up will kill you on Exchange to Exchange SMTP connections, but not non-exchange. Kill it or but a non ESMTP server in front as a relay like IIS. Try TELNET 209.43.20.203 25 Then Try TELNET MAIL.IQUEST.NET 25 The responses should be 220 iquest3.iquest.net ESMTP If the first works and not the second, you probably have a DNS issue on the Exchange server. Chad P. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 9:10 AM To: [EMAIL PROTECTED] Subject: RE: Pix Firewall ya the mail is all sitting in the queue set to retry. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:40 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Did you check the mail queue to see if the mail is there? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:37 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Dns records are forwarding and MX record is being populated. I can telnet out on port 25. It seems to me that the mail is being stopped at the exchange server. I can send mail in fine just outbound doesn't work. I haven't disabled the fixup yet I am going to try that next. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:28 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Are your DNS records (forwarding) good i.e. is your MX record being populated well? ß this is a weird question to ask but just checking a low chance hunch. Is the mail being stopped on the exchange server or held in the senders mailbox? Can you telnet or ping from your box to the outside world using port 25 and/or 110? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:55 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PM To: MS-Exchange Admin Issues Subject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, Jonathan List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm +++The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon,
RE: Domain type stuck in IMS
Sounds like a DNS problem. If you're using an internal DNS that's doing forwarding make sure there hasn't been a .net zone created on your internal DNS. -Original Message- From: Errol Parker [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:38 AM To: MS-Exchange Admin Issues Subject: Domain type stuck in IMS I sent a note yesterday regarding a particular domain (earthlink.net) stuck in the IMS. It seems that it is not just one domain, but one domain type sitting in the outbound queue. The emails stuck are all .net domain types. Anyone else experience this? List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exch5.5 and Linux firewall
Sad but true -Original Message- From: Benjamin Scott [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:42 AM To: MS-Exchange Admin Issues Subject:RE: Exch5.5 and Linux firewall Security is a process, not a product. - List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message Hello ... is this thing on ?? Antigen http://www.sybari.com/products/antigen_exchange.asp can do this for exchange. If someone sends you an mp3 file or an exe and they rename it, it will still pick it up because itchecks the attachments based on extension and file type. -Original Message-From: Robin Lawrie [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:47To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Definitely. It's all too easy to change the extension of a file so it's allowed through a virus scanner/mail management software when it shouldn't be, and then renamed at the other end. We have a similar problem on our file server. We've prohibited people from saving particular files, such as mp3, but they can all bypass it by changing the extension of the file to .zip or .doc. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify us immediately at [EMAIL PROTECTED] and delete this E-mail from your system. Thank you. It is possible for data transmitted by email to be deliberately or accidentally corrupted or intercepted. For this reason, where the communication is by email, the Bank of Ireland Group does not accept any responsibility for any breach of confidence which may arise through the use of this medium. This footnote also confirms that this email message has been swept for the presence of known computer viruses. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: How many of you use Message Level Recovery ?
No comment... -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:04 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there), nor make your normal non-brick-level backups less reliable. They do, however, use more tape, make your backup jobs take more time and wear your tape drive out faster. They give you a false sense of security that you can get something back when in fact you may not. And you often cannot get everything back from a brick level backup. Brick Level Backup is a kludgy crutch for administrators who insist on managing their Exchange systems as if they were cc:Mail or MS Mail systems. They want the benefits of a database e-mail architecture, but want to manage it as if it were a file-based system. If you follow the Ed Crowley Never Restore Method®, you can remain secure in the knowledge that you'll almost never need to do a Brick Level Restore. If, for some rare event you find that you need to restore a message or mailbox, then you have a great opportunity to practice your disaster recovery techniques on your recovery server. What? You don't have a recovery server? Well, you need one whether or not you use Brick Level Backup. In a nutshell, Brick Level Backups aren't evil. But they're completely superfluous. -Ed Crowley MCSE+Internet MVP ** -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I was thinking about how people seem to read the Bible a whole lot more as they get older, then it dawned on me...they were cramming for their finals... - -Original Message- From: Kumar, Ashish [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:08 PM To: MS-Exchange Admin Issues Subject: How many of you use Message Level Recovery ? Hi all, have seen some interesting discussions on this forum, and Id like to as a very basic question(this is not for market
RE: Eseutil
Title: Message There should be no reason to defrag the databases this regularly (unless you are approaching the 16Gig limit on Standard Ed.) - if there is free space in the db then leave it there - it is just white space which gets filled up by new data as and when the IS needs it. The information store will not go and grab more disk space if it has free space in the db already. All you are effectively doing is loading your server by making the db work harder by having to re write all the data every time you reclaim this space. -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 14:23To: MS-Exchange Admin IssuesSubject: RE: Eseutil I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message It sounds cool. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:50 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message I believe that antigen is aware of this trick and will still remove it. -Original Message-From: Robin Lawrie [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:47 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Definitely. It's all too easy to change the extension of a file so it's allowed through a virus scanner/mail management software when it shouldn't be, and then renamed at the other end. We have a similar problem on our file server. We've prohibited people from saving particular files, such as mp3, but they can all bypass it by changing the extension of the file to .zip or .doc. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message Personally I don't have a problem with that YET. My developers regularly do this to get data from other companies, etc. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:27 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments thats what i want, but currently i cant find software do block it like that. i can block .exe files, but if you send me an exe file renamed to .MSN, that file still comes thru. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:50 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message Paul, this thing is turned on :-) I got your first message about Antigen the second after I sent my 2 pennies worth!! -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 15:01To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Hello ... is this thing on ?? Antigen http://www.sybari.com/products/antigen_exchange.asp can do this for exchange. If someone sends you an mp3 file or an exe and they rename it, it will still pick it up because itchecks the attachments based on extension and file type. -Original Message-From: Robin Lawrie [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:47To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Definitely. It's all too easy to change the extension of a file so it's allowed through a virus scanner/mail management software when it shouldn't be, and then renamed at the other end. We have a similar problem on our file server. We've prohibited people from saving particular files, such as mp3, but they can all bypass it by changing the extension of the file to .zip or .doc. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmThis email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify us immediately at [EMAIL PROTECTED] and delete this E-mail from your system. Thank you.It is possible for data transmitted by email to be deliberately oraccidentally corrupted or intercepted. For this reason, where thecommunication is by email, the Bank of Ireland Group does not accept any responsibility for any breach of confidence which may arise through the use of this medium.This footnote also confirms that this email message has been swept for the presence of known computer viruses.List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message Seems to me that Trend's Scanmailused to do this but doesn't in it's current version. Something to do with them moving to the MS AVAPI. Think they offer an alternate API for use that may do this. -Original Message-From: Boswell Tim [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:43 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments it's a nice thought.it'd take a hell of a lot of doing thoughyou'd be looking at opening every single attachment that comes through, and analysing it to determine what file type it isCan't see that having a good effect on performance... -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message Why would it "take a hell of a lot of doing though"? Err... isn't every attachment analysed already?? Kevin -Original Message-From: Boswell Tim [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:43To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments it's a nice thought.it'd take a hell of a lot of doing thoughyou'd be looking at opening every single attachment that comes through, and analysing it to determine what file type it isCan't see that having a good effect on performance... -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message of course, the one problem is that in abusiness environment, ZIP files are rife, and inone sense good, because they keep the attachment size down for work related material. The problem is that if a file is renamed THEN zipped, you've got twice the battle. Can you really risk filtering all ZIP files and losing business critical information to it? Of course, that said, it's quite possible to insert a file as a package in a Word doc, so if someone really wants to get something in, and the person at the other end knows it's coming, there's no easy way of stopping it. Even if your package can look inside ZIP files and filter files from within them, all it sees is a word document, and it goes straight through. -Original Message-From: Mark Kelsay [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 15:07To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments I believe that antigen is aware of this trick and will still remove it. -Original Message-From: Robin Lawrie [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:47 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Definitely. It's all too easy to change the extension of a file so it's allowed through a virus scanner/mail management software when it shouldn't be, and then renamed at the other end. We have a similar problem on our file server. We've prohibited people from saving particular files, such as mp3, but they can all bypass it by changing the extension of the file to .zip or .doc. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
Re: OWA in DMZ?
How do I get started setting this up? I've not worked with SSL and certificates before. Any detailed instructions or links would be appreciated. We're using NAT behind the firewall, so how do I route the requests to the internal box without exposing too much? Thanks - Original Message - From: Mark Kelsay [EMAIL PROTECTED] To: MS-Exchange Admin Issues [EMAIL PROTECTED] Sent: Thursday, October 25, 2001 3:09 PM Subject: RE: OWA in DMZ? This is what I do as well. Works great for me. -Original Message- From: Briggs, Bruce [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 25, 2001 3:09 PM To: MS-Exchange Admin Issues Subject: RE: OWA in DMZ? OWA on an internal box with SSL. You could use your existing internal OWA box, just install a certificate. Bruce Briggs System Administration State University of NY -Original Message- From: Dianne Roberts [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 25, 2001 2:49 PM To: MS-Exchange Admin Issues Subject: OWA in DMZ? Hi all. I'm new to the list, so apologize if this is a duplicate post. What's everyones opinions on an OWA 5.5 (NT4) box in the DMZ? Primary Exchange server is 5.5 (NT4) behind firewall (using NAT) and OWA is already installed on the same box for internal use. Need to make OWA available external. What is the best way? OWA in DMZ? OWA in DMZ with SSL? Use OWA on internal box? (how?) Tried to install OWA on a test DMZ box, but it failed because it wants a domain. My DMZ boxes are in a workgroup. Opinions, thoughts, suggestions? Thanks List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message maybe. but there's a lot of difference between a cursory look to see what it says it is, and examining the content to see exactly what's in thereof course, I could be talking total rubbish!!! Never mind, just realised any AV product does this anyway.I am talking rubbish! ignore me! -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 15:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why would it "take a hell of a lot of doing though"? Err... isn't every attachment analysed already?? Kevin -Original Message-From: Boswell Tim [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:43To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments it's a nice thought.it'd take a hell of a lot of doing thoughyou'd be looking at opening every single attachment that comes through, and analysing it to determine what file type it isCan't see that having a good effect on performance... -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message How are you preventing your users from saving these files to your servers? -Original Message-From: Robin Lawrie [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 8:47 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Definitely. It's all too easy to change the extension of a file so it's allowed through a virus scanner/mail management software when it shouldn't be, and then renamed at the other end. We have a similar problem on our file server. We've prohibited people from saving particular files, such as mp3, but they can all bypass it by changing the extension of the file to .zip or .doc. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
OT - Pix Firewalls
This is off topic, but since you mentioned Pix Firewalls, thought this would be a good place to ask. Our new network manager has ordered a Pix Firewall. We will be dropping our managed security and doing this ourselves. It will be a great learning experience, but none of us have ever worked with this product, or handledsecurity, FTM. Can anyone point me to some good learning material on how to configure and manage a Pix Firewall? Karen Palmer SCJD List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Eseutil
Title: Message This statement is NOT entirely accurate. Try the following syntax and you can direct wherever you want including mapped drives. For example, C:\exchsrver/bineseutil /d /ispriv /tf:\tempedb.edb. Notice, there is no space between the /t and the drive you wish to defrag on. -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:23 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: OWA in DMZ?
NAT to the Exch box. Only allow port 443 if you are going to use SSL. As for installing the cert, I THINK verisign has a how to on their site. -Original Message- From: Dianne Roberts [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:17 AM To: MS-Exchange Admin Issues Subject: Re: OWA in DMZ? How do I get started setting this up? I've not worked with SSL and certificates before. Any detailed instructions or links would be appreciated. We're using NAT behind the firewall, so how do I route the requests to the internal box without exposing too much? Thanks - Original Message - From: Mark Kelsay [EMAIL PROTECTED] To: MS-Exchange Admin Issues [EMAIL PROTECTED] Sent: Thursday, October 25, 2001 3:09 PM Subject: RE: OWA in DMZ? This is what I do as well. Works great for me. -Original Message- From: Briggs, Bruce [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 25, 2001 3:09 PM To: MS-Exchange Admin Issues Subject: RE: OWA in DMZ? OWA on an internal box with SSL. You could use your existing internal OWA box, just install a certificate. Bruce Briggs System Administration State University of NY -Original Message- From: Dianne Roberts [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 25, 2001 2:49 PM To: MS-Exchange Admin Issues Subject: OWA in DMZ? Hi all. I'm new to the list, so apologize if this is a duplicate post. What's everyones opinions on an OWA 5.5 (NT4) box in the DMZ? Primary Exchange server is 5.5 (NT4) behind firewall (using NAT) and OWA is already installed on the same box for internal use. Need to make OWA available external. What is the best way? OWA in DMZ? OWA in DMZ with SSL? Use OWA on internal box? (how?) Tried to install OWA on a test DMZ box, but it failed because it wants a domain. My DMZ boxes are in a workgroup. Opinions, thoughts, suggestions? Thanks List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm _ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
There are seldom good technological solutions for behavioral problems! -Ed Crowley If people do this -- rename attachments to get past filters -- identify them fire them -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - Build a man a fire, and he'll be warm for a day. Set a man on fire, and he'll be warm for the rest of his life. -Terry Pratchett. - -Original Message- From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 9:27 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments thats what i want, but currently i cant find software do block it like that. i can block .exe files, but if you send me an exe file renamed to .MSN, that file still comes thru. -Original Message- From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:50 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Why not? -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 13:44 To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message- From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Auto creation of user profile
Profgen, otherwise known as Profile Generator. MS product. Very easy to use... Email me offline and I'll send it to you if you can't find it. -Original Message- From: David James [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:35 PM To: MS-Exchange Admin Issues Subject: RE: Auto creation of user profile Never heard of it. MS product or 3rd party? Thanks Michele... DJ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 2:08 PM To: MS-Exchange Admin Issues Subject: RE: Auto creation of user profile profgen? -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I'll hold it and you light the fuse. - Famous Last Words - -Original Message- From: David James [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:08 PM To: MS-Exchange Admin Issues Subject: Auto creation of user profile Is there a way to have 2000 automatically configure the Exchange profile for a user after they log into the domain for the first time on a machine? DJ -- David James Infrastructure Administrator Generation Technologies Corporation V: 913-345-1012 x103 F: 913-345-0156 mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] MSN Messenger: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: OT - Pix Firewalls
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/index.htm -Original Message-From: Karen Palmer [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 10:42 AMTo: MS-Exchange Admin IssuesSubject: OT - Pix Firewalls This is off topic, but since you mentioned Pix Firewalls, thought this would be a good place to ask. Our new network manager has ordered a Pix Firewall. We will be dropping our managed security and doing this ourselves. It will be a great learning experience, but none of us have ever worked with this product, or handledsecurity, FTM. Can anyone point me to some good learning material on how to configure and manage a Pix Firewall? Karen Palmer SCJDList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Prevent sending attachments
Title: Message Maybe "ZIP files are rife"in ICL but that's not a normal business environment. Most of the users I come across can't spell ZAp , I mean Zep, err... I mean Zop. Attaching a file is about as good as it gets! Kevin -Original Message-From: Boswell Tim [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 15:19To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments of course, the one problem is that in abusiness environment, ZIP files are rife, and inone sense good, because they keep the attachment size down for work related material. The problem is that if a file is renamed THEN zipped, you've got twice the battle. Can you really risk filtering all ZIP files and losing business critical information to it? Of course, that said, it's quite possible to insert a file as a package in a Word doc, so if someone really wants to get something in, and the person at the other end knows it's coming, there's no easy way of stopping it. Even if your package can look inside ZIP files and filter files from within them, all it sees is a word document, and it goes straight through. -Original Message-From: Mark Kelsay [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 15:07To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments I believe that antigen is aware of this trick and will still remove it. -Original Message-From: Robin Lawrie [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:47 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Definitely. It's all too easy to change the extension of a file so it's allowed through a virus scanner/mail management software when it shouldn't be, and then renamed at the other end. We have a similar problem on our file server. We've prohibited people from saving particular files, such as mp3, but they can all bypass it by changing the extension of the file to .zip or .doc. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:
RE: Prevent sending attachments
Title: Message Currently trialling two pieces of software. One is FileScreen 2000 and the other one is PowerExpert ST from PowerQuest ( http://www.powerquest.com/powerexpertst/) -Original Message-From: Blake R. Fowkes [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 15:17To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments How are you preventing your users from saving these files to your servers? -Original Message-From: Robin Lawrie [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 8:47 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Definitely. It's all too easy to change the extension of a file so it's allowed through a virus scanner/mail management software when it shouldn't be, and then renamed at the other end. We have a similar problem on our file server. We've prohibited people from saving particular files, such as mp3, but they can all bypass it by changing the extension of the file to .zip or .doc. -Original Message-From: Snook, Kevin S (ITD) [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 14:50To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments Why not? -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]]Sent: 31 October 2001 13:44To: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments What do you mean? Something that would block a .EXE file even if the extension was changed to .XXX? H.interesting. -Original Message-From: MHR(Michael Ross) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:36 AMTo: MS-Exchange Admin IssuesSubject: RE: Prevent sending attachments NAV for Exchange can do this with a registry tweak.. Its in the read me. What id like is software that filters file types without using extentions. -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:35 AM To: MS-Exchange Admin Issues Subject: RE: Prevent sending attachments Your Exchange aware Antivirus SW should be able to do this. What are you using? -Original Message- From: Vlastimil Schart [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:35 AM To: MS-Exchange Admin Issues Subject: Prevent sending attachments Hi there, We are using Exchange Server 5.5 SP3 on a Windows NT Server 4.0 SP6. Clients are using Outlook 97. Is there a way to prevent users from sending attachment of a specific filetype ? For instance *.mpeg, *.avi an so on ? Both internal and external mail. Regards, Vlastimil Schart Arcus ASA List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Pix Firewall
Title: Message OK, I tried the DNS test below and everything worked fine. I got the 220 message on both attempts. The queue failure on outgoing messages says" The remote server did not respond to a connection attempt." -Original Message-From: Purviance, Chad [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 9:47 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall You said you can Telnet out on Port 25 but you didnt say if it was by name. IE check the DNS on outbound. The messages in Queue have a failure status. What is it?? IE Host unknown, network error, didnt send cash to BillG?? This will usually show you more of what is going on. The SMTP fix-up will kill you on Exchange to Exchange SMTP connections, but not non-exchange. Kill it or but a non ESMTP server in front as a relay like IIS. Try TELNET 209.43.20.203 25 Then Try TELNET MAIL.IQUEST.NET 25 The responses should be 220 iquest3.iquest.net ESMTP If the first works and not the second, you probably have a DNS issue on the Exchange server. Chad P. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:10 AMTo: [EMAIL PROTECTED]Subject: RE: Pix Firewall ya the mail is all sitting in the queue set to retry. -Original Message-From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:40 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Did you check the mail queue to see if the mail is there? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 7:37 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Dns records are forwarding and MX record is being populated. I can telnet out on port 25. It seems to me that the mail is being stopped at the exchange server. I can send mail in fine just outbound doesn't work. I haven't disabled the fixup yet I am going to try that next. -Original Message-From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:28 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Are your DNS records (forwarding) good i.e. is your MX record being populated well? this is a weird question to ask but just checking a low chance hunch. Is the mail being stopped on the exchange server or held in the senders mailbox? Can you telnet or ping from your box to the outside world using port 25 and/or 110? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 6:55 AMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PMTo: MS-Exchange Admin IssuesSubject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message-From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PMTo: MS-Exchange Admin IssuesSubject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, Jonathan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ
Mailing Lists
Does anyone have suggestions for dealing with mailing lists? We're running e2k sp1 on w2k sp2 and have several very large mailing lists to maintain. For example, we have one list that sends a newsletter out to most of our employees as well as a few thousand of our customers that request it. This should be simple enough but, we just can't seem to find the right balance of proper administration and ease of use. From your experiences, what is the most effective way to maintain and administer these lists? Thanks, Randy Lauritzen Senior Network Administrator Andavo Travel [EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: OT - Pix Firewalls
Title: Message www.cisco.com. There is no other "real" documentation out there unfortunately. I learned it on the fly. If you know the Cisco IOS at all, it won't be all that difficult. D -Original Message-From: Karen Palmer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:42 AMTo: MS-Exchange Admin IssuesSubject: OT - Pix Firewalls This is off topic, but since you mentioned Pix Firewalls, thought this would be a good place to ask. Our new network manager has ordered a Pix Firewall. We will be dropping our managed security and doing this ourselves. It will be a great learning experience, but none of us have ever worked with this product, or handledsecurity, FTM. Can anyone point me to some good learning material on how to configure and manage a Pix Firewall? Karen Palmer SCJDList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: 552 Header Line is ridiculously overlong
Thanks Simon, that did the trick. Strange that I could no reference to this on the MS Site? Cheers, James. Hi James This happens when the header is more that 8192 bytes long and is by design. I suggest that the user use bcc to send the mails off. Cheers -Original Message- From: James Gosnold [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 12:04 To: MS-Exchange Admin Issues Subject: Re: 552 Header Line is ridiculously overlong Sorry just a bit more info about the NDR, it comes back listing each recipient like so: The following recipient(s) could not be reached: Bob Smith (E-mail) on 31/10/01 10:49 Unable to deliver the message due to a communications failure The MTS-ID of the original message is: c=GB;a= ;p=ORG;l=MAIL_SERVER-011031104908Z-8524 MSEXCH:IMS:ORG:SITE:MAIL_SERVER 3552 (000B099C) 552 Header line is ridiculously overlong Thanks, James. Dear all, One of our users is receiving this NDR (as am I as the IMS Admin) when he tries to send an e-mail to Mailshot distribution list he created. First he added each individual name in the 'To' field and it failed. Then we created a distribution list (actually 2 of them to split them up) and it failed again. There are around 160 e-mail addresses in total. Technet is no help, a search on google found a couple of articles but they were a bit vague, due to one article we also tried putting the list into the CC field but alas this was also in vain. There are no restrictions on the users mailbox either. The server is 5.5 sp3 by the way. Any ideas my fellow Exchange administrators? Thanks. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: OT - Pix Firewalls
Thanks for the link. Karen Palmer SCJD List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Eseutil
Title: Message So what is the best practice with defragmentation? MS says that "ESEUITL is not considered a tool for regular maintenance andshould only be used in case of emergency after contacting Microsoft Technical Support". On the other hand, there're people here that use it on monthly basis! So, to use or not to use? -Original Message-From: Kopec, David [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 10:41 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil This statement is NOT entirely accurate. Try the following syntax and you can direct wherever you want including mapped drives. For example, C:\exchsrver/bineseutil /d /ispriv /tf:\tempedb.edb. Notice, there is no space between the /t and the drive you wish to defrag on. -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:23 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
NT 4 120 day eval situation
Hy, i have a NT 4 (SP6a) server with MXS 5.5 (SP4) running on it. Lucky as i am the server suddenly thinks it´s a 120 eval box and reboots every 2 hours. Having a look at Q173507 i´m not too happy with this solution. Has anyone used http://www.algintech.com/UTools/UDeploy.asp to solve this situation ? Thanks a lot This communication is intended solely for the addressee and is confidential and not for third party unauthorised distribution. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: How many of you use Message Level Recovery ?
People sometimes want a mail restored that they deleted more than 90 days ago! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 14:10 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? You may wonder why we bother with BLB when we have such a long deleted item retention period: a)It is occasionally handy to restore an individual email without using a separate restore server b)Restoring an single email can be quicker - hero factor when someone's in trouble! c)Gives a belt and braces approach to backup But, but, but...! With such a long DIR period, you don't NEED BLB to do a), b), c)!!! ::confused:: No separate restore server is needed; and DIR is quick, quick, quick (vite, even!). re: c) -- my dentist said that braces probably wouldn't do me any good -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I am in shape. Round is a shape... - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:04 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there), nor make your normal non-brick-level backups less reliable. They do, however, use more tape, make your backup jobs take more time and wear your tape drive out faster. They give you a false sense of security that you can get something back when in fact you may not. And you often cannot get everything back from a brick level backup. Brick Level Backup is a kludgy crutch for administrators who insist on managing their Exchange systems as if they were cc:Mail or MS Mail systems. They want the benefits of a database e-mail architecture, but want to manage it as if it were a file-based system. If you follow the Ed Crowley Never Restore Method®, you can remain secure in the knowledge that you'll almost never need to do a Brick Level Restore. If, for
RE: OT - Pix Firewalls
Marks suggestion is a good one. The information is good. If you have not worked with IOS and/or the cmd line for a while then you really need to take a PIX class. They are two days long but will make setup and managing go well. PIX (IMO) seem to need a lot of love and care so having some sort of PIX person handy will be probably be appreciated. Also make sure you are running the latest IOS and save images to a secure and backuped machine. ellery -Original Message- From: Karen Palmer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 9:42 AM To: MS-Exchange Admin Issues Subject: OT - Pix Firewalls This is off topic, but since you mentioned Pix Firewalls, thought this would be a good place to ask. Our new network manager has ordered a Pix Firewall. We will be dropping our managed security and doing this ourselves. It will be a great learning experience, but none of us have ever worked with this product, or handledsecurity, FTM. Can anyone point me to some good learning material on how to configure and manage a Pix Firewall? Karen Palmer SCJD List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exchange 5.5/Arcserve backup
I think I am still on 6.61 sp1. Thanks. I also got a reply from Computer Associates with that one. Apparently they do not like what I have to say about their products. Unfortunately they are 3 years late in expressing their concern. William -Original Message- From: James Gosnold [mailto:[EMAIL PROTECTED]] Sent: October 31, 2001 1:34 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 5.5/Arcserve backup I am a fully signed up member of the CA bashing bandwagon and for the same reason as William, I have to use their products every day. The ArcserveIT Exchange agent at our HQ has never ever given me a clean backup in a year, there is always an error message or some small glitch. I do restore fairly regularly so it does work (although it's very tricky to restore as well) but it's so inconsistent. There is a Service Pack 2 for ArcserveIT 6.61 which I assume you are using? You can get it from the CA site or I can mail it to you (11MB zip file), you have to run it on both the backup server and the server with the agent on it. James. Warning: Unhelpful, but very therapeutic, rant: I don't have much in the way of useful assistance here, other than, don't use ArcServeIT. The exchange agent is crap. It's worse than a buttload of POP connectors. Is this opinion from the bandwagon of Computer Associates bashers? No, it's from using the poorly written product for a few years. I no longer support nor intend to jeopardize important information such as email with any CA product as a result of working with the Exchange Agents. They do make some good software, but not in this department. Again, though ignored multiple times before, I invite Computer Associates to join this forum of peers and defend their applications to the people that actually use them. Because, last I checked there is no Computer Associates MVP programme, and frankly you don't have enough money to afford me to look up the answer. Otherwise, it would seem you need sufficient rights to install this software, and you don't have such. Some thoughts... Exchange server 5.5 SP2 Why only sp2? I hope you at least have the post-sp2 IMS fixes applied or you do not have this connected to the internet. I suspect the Exchange Administrator account is corrupted. Not the likely target. I logged into the Service Account and made sure I was Administrator there too. I'm not sure I understand that. When I tried to install A/V software I couldn't log in as Exchange Administrator either. That must have been the other frustrating piece of crap software known as EjaculateIT. Personally, I'd go with grisoft's product (www.grisoft.com), as Warren has done, if I could. The above thoughts are solely my own. William Lefkovics, MCSE, A+, ExchangeMVP -Original Message- From: Warren Walker [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 6:12 AM To: MS-Exchange Admin Issues Subject: Exchange 5.5/Arcserve backup Can anybody offer any words of wisdom on this? -Original Message- From: Warren Walker [mailto:[EMAIL PROTECTED]] Sent: October 29, 2001 7:46 AM To: MS-Exchange Admin Issues Subject: ARCSERVE for IBM 1/2 DAT 35/70MB drive...Administrator rights on Exchange 5.5. I can't seem to get ARCServe to back up my (WINNT 4.0 SP6) Exchange server 5.5 SP2 data files. I get an error message that tells me that the files were not copied onto tape and that I should check to make sure I have Administrator rights on the files. I tried to log into Exchange Server under the same administrator password and there's no problem. I logged into the Service Account and made sure I was Administrator there too. But, When I tried to install A/V software I couldn't log in as Exchange Administrator either. Where do I look to resolve my password problems? I suspect the Exchange Administrator account is corrupted. Also, one of my users lost his word functionality and even though I've scanned his machine with two different antivirus programs, I can't find any viruses or worms, which brings me back to Exchange Server. Unfortunately, I can't install an A/V program for MS-exchange until I resolve the Exchange Administrator account which won't let me install the A/V software. Any ideas? Thanks in advance. Warren Walker List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.292 / Virus Database: 157 - Release Date: 10/26/01 List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: OT - Pix Firewalls
Title: Message www.cisco.com Candee -Original Message-From: Karen Palmer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 10:42 AMTo: MS-Exchange Admin IssuesSubject: OT - Pix Firewalls This is off topic, but since you mentioned Pix Firewalls, thought this would be a good place to ask. Our new network manager has ordered a Pix Firewall. We will be dropping our managed security and doing this ourselves. It will be a great learning experience, but none of us have ever worked with this product, or handledsecurity, FTM. Can anyone point me to some good learning material on how to configure and manage a Pix Firewall? Karen Palmer SCJDList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: OT - Pix Firewalls
Title: Message Another suggestion is to get your "Network Manager" to spring for a training class for one of your fellow co-workers. Then that person can come back and teach the rest of the staff. Mark -Original Message-From: Don Ely [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 10:44 AMTo: MS-Exchange Admin IssuesSubject: RE: OT - Pix Firewalls www.cisco.com. There is no other "real" documentation out there unfortunately. I learned it on the fly. If you know the Cisco IOS at all, it won't be all that difficult. D -Original Message-From: Karen Palmer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:42 AMTo: MS-Exchange Admin IssuesSubject: OT - Pix Firewalls This is off topic, but since you mentioned Pix Firewalls, thought this would be a good place to ask. Our new network manager has ordered a Pix Firewall. We will be dropping our managed security and doing this ourselves. It will be a great learning experience, but none of us have ever worked with this product, or handledsecurity, FTM. Can anyone point me to some good learning material on how to configure and manage a Pix Firewall? Karen Palmer SCJDList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Eseutil
Title: Message I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. 1) That logic is so flawed I can smell it from here. (Forgive me if I'm wrong, Sherry, but aren't you the one that recovers the SAME 450MB every month or was that someone else?) That might have been someone else. It is simply NOT correct. The database doesn't perpetually grow if there is unused whitespace. it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. 2) That is also incorrect. Have a look at eseutil /? (which in my opinion is the only switch you should be running eseutil with). Do be aware that the speed of this process over the network will be significantly slower than if the temp database was local. William Lefkovics, MCSE, A+ -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 6:23 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: OT - Pix Firewalls
Make sure you purchase the maintenance, Cisco has a very good support but it is only available during the warranty period (90 days) or if you have purchased a maintenance contract. Check out their web site for documentation as well as information on PIX training. Randy Hensel, MCP, Network Systems Administrator Coffey Communications, Inc. [EMAIL PROTECTED] 509.525.0101 Ext. 594 509.525.4793 (Fax) http://www.coffeycomm.com -Original Message- From: Karen Palmer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:42 AM To: MS-Exchange Admin Issues Subject: OT - Pix Firewalls This is off topic, but since you mentioned Pix Firewalls, thought this would be a good place to ask. Our new network manager has ordered a Pix Firewall. We will be dropping our managed security and doing this ourselves. It will be a great learning experience, but none of us have ever worked with this product, or handledsecurity, FTM. Can anyone point me to some good learning material on how to configure and manage a Pix Firewall? Karen Palmer SCJD List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: OT - Pix Firewalls
Don't know Cisco IOS. We are getting our first router, too. Guess it will be a REAL learning experience. Now, let me go book mark that Cisco site... Karen Palmer List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: How many of you use Message Level Recovery ?
Why the !? I have been using a DIR period of 35 days ever since going live with Exchange 5.5 2 years ago. In all of that time, we have NEVER had to do a message or mailbox restore from tape. -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - Motivational Speaker Klingon: EVERY day is a good day to die! Say it with me! - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 11:14 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? People sometimes want a mail restored that they deleted more than 90 days ago! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 14:10 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? You may wonder why we bother with BLB when we have such a long deleted item retention period: a)It is occasionally handy to restore an individual email without using a separate restore server b)Restoring an single email can be quicker - hero factor when someone's in trouble! c)Gives a belt and braces approach to backup But, but, but...! With such a long DIR period, you don't NEED BLB to do a), b), c)!!! ::confused:: No separate restore server is needed; and DIR is quick, quick, quick (vite, even!). re: c) -- my dentist said that braces probably wouldn't do me any good -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I am in shape. Round is a shape... - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:04 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there),
RE: Eseutil
Title: Message Most the people here who use it on a monthly basis would have a very difficult time explaining what the log files are, what they are used for, and why they are there. don't go by them. Listen to people who know what they are talking about. DON'T TOUCH eseutil unless you are on the phone with PSS or know what you are doing and have a very good backup. The best maintance for Exchange is apply service packs. other then that nothing needs to be done. The longera server is up the better. Kevinm M WLKMMAS, UCC+WCA, CKWSE -Original Message-From: Dimitri Limanovski [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:13 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil So what is the best practice with defragmentation? MS says that "ESEUITL is not considered a tool for regular maintenance andshould only be used in case of emergency after contacting Microsoft Technical Support". On the other hand, there're people here that use it on monthly basis! So, to use or not to use? -Original Message-From: Kopec, David [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 10:41 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil This statement is NOT entirely accurate. Try the following syntax and you can direct wherever you want including mapped drives. For example, C:\exchsrver/bineseutil /d /ispriv /tf:\tempedb.edb. Notice, there is no space between the /t and the drive you wish to defrag on. -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:23 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: NT 4 120 day eval situation
I doubt your server made that decision on its own. It is NT that is the eval version and not Exchange, right? I have never used this tool. UDecide. -Original Message- From: Schatz, Daniel [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:12 AM To: MS-Exchange Admin Issues Subject: NT 4 120 day eval situation Hy, i have a NT 4 (SP6a) server with MXS 5.5 (SP4) running on it. Lucky as i am the server suddenly thinks it´s a 120 eval box and reboots every 2 hours. Having a look at Q173507 i´m not too happy with this solution. Has anyone used http://www.algintech.com/UTools/UDeploy.asp to solve this situation ? Thanks a lot This communication is intended solely for the addressee and is confidential and not for third party unauthorised distribution. List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: How many of you use Message Level Recovery ?
So what! Practice your Disaster Recovery procedures. Your excuse is weak! I've never used BLB's and I've been working with Exchange since it was born. Never had to think about BLB's. Your theory is useless! -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:14 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? People sometimes want a mail restored that they deleted more than 90 days ago! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 14:10 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? You may wonder why we bother with BLB when we have such a long deleted item retention period: a)It is occasionally handy to restore an individual email without using a separate restore server b)Restoring an single email can be quicker - hero factor when someone's in trouble! c)Gives a belt and braces approach to backup But, but, but...! With such a long DIR period, you don't NEED BLB to do a), b), c)!!! ::confused:: No separate restore server is needed; and DIR is quick, quick, quick (vite, even!). re: c) -- my dentist said that braces probably wouldn't do me any good -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I am in shape. Round is a shape... - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:04 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there), nor make your normal non-brick-level backups less reliable. They do, however, use more tape, make your backup jobs take more time and wear your tape drive out faster. They give you a false sense of security that you can get something back when in fact you may not. And you often cannot get everything back from a brick level backup.
RE: Eseutil
Title: Message Only use it if you are directed to by PSS, or if you are using the standard edition of Exchange 5.5 and are running into the 16GB limit. Exchange handles online defrag quite well so there should be no need to run and offline defrag unless you are running into the 16GB limit on Standard Edition. -Original Message-From: Dimitri Limanovski [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 11:13 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil So what is the best practice with defragmentation? MS says that "ESEUITL is not considered a tool for regular maintenance andshould only be used in case of emergency after contacting Microsoft Technical Support". On the other hand, there're people here that use it on monthly basis! So, to use or not to use? -Original Message-From: Kopec, David [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 10:41 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil This statement is NOT entirely accurate. Try the following syntax and you can direct wherever you want including mapped drives. For example, C:\exchsrver/bineseutil /d /ispriv /tf:\tempedb.edb. Notice, there is no space between the /t and the drive you wish to defrag on. -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:23 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Eseutil
Title: Message Q244525 Q192185 -Original Message-From: Kopec, David [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 10:41 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil This statement is NOT entirely accurate. Try the following syntax and you can direct wherever you want including mapped drives. For example, C:\exchsrver/bineseutil /d /ispriv /tf:\tempedb.edb. Notice, there is no space between the /t and the drive you wish to defrag on. -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:23 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: How many of you use Message Level Recovery ?
In reality, does this actually happen quite a lot? I'm curious because we're about to implement a 90 day DIR in my company. What is the size of your user base? -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 16:14 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? People sometimes want a mail restored that they deleted more than 90 days ago! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 14:10 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? You may wonder why we bother with BLB when we have such a long deleted item retention period: a)It is occasionally handy to restore an individual email without using a separate restore server b)Restoring an single email can be quicker - hero factor when someone's in trouble! c)Gives a belt and braces approach to backup But, but, but...! With such a long DIR period, you don't NEED BLB to do a), b), c)!!! ::confused:: No separate restore server is needed; and DIR is quick, quick, quick (vite, even!). re: c) -- my dentist said that braces probably wouldn't do me any good -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I am in shape. Round is a shape... - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:04 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there), nor make your normal non-brick-level backups less reliable. They do, however, use more tape, make your backup jobs take more time and wear your tape drive out faster. They give you a false sense of security that you can get something back when in fact you may not. And you often cannot get everything back from a brick level backup. Brick Level Backup is a kludgy crutch for administrators who insist
RE: How many of you use Message Level Recovery ?
Tough luck, sucks to be them. Else go get the tape, this would be a great time to test your backups. Kevinm M WLKMMAS, UCC+WCA, CKWSE -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:14 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? People sometimes want a mail restored that they deleted more than 90 days ago! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 14:10 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? You may wonder why we bother with BLB when we have such a long deleted item retention period: a)It is occasionally handy to restore an individual email without using a separate restore server b)Restoring an single email can be quicker - hero factor when someone's in trouble! c)Gives a belt and braces approach to backup But, but, but...! With such a long DIR period, you don't NEED BLB to do a), b), c)!!! ::confused:: No separate restore server is needed; and DIR is quick, quick, quick (vite, even!). re: c) -- my dentist said that braces probably wouldn't do me any good -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I am in shape. Round is a shape... - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:04 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there), nor make your normal non-brick-level backups less reliable. They do, however, use more tape, make your backup jobs take more time and wear your tape drive out faster. They give you a false sense of security that you can get something back when in fact you may not. And you often cannot get everything back from a brick level backup. Brick Level Backup is a kludgy crutch for administrators who insist on
RE: Eseutil
Title: Message Use it onlywhen it's needed. It is run regularly only by misinformed admins that: 1) consider their email content and server non-critical. 2) do not need email to be available to their users 24/7. 3) enjoy playing with the cleaning people on the IT chesterfield. William -Original Message-From: Dimitri Limanovski [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 8:13 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil So what is the best practice with defragmentation? MS says that "ESEUITL is not considered a tool for regular maintenance andshould only be used in case of emergency after contacting Microsoft Technical Support". On the other hand, there're people here that use it on monthly basis! So, to use or not to use? -Original Message-From: Kopec, David [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 10:41 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil This statement is NOT entirely accurate. Try the following syntax and you can direct wherever you want including mapped drives. For example, C:\exchsrver/bineseutil /d /ispriv /tf:\tempedb.edb. Notice, there is no space between the /t and the drive you wish to defrag on. -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:23 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: How many of you use Message Level Recovery ?
How long are backups kept. What if someone said they wanted a email from 2 years ago could you get it. All of these days/dates are chosen somewhat randomly. -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:14 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? People sometimes want a mail restored that they deleted more than 90 days ago! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 14:10 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? You may wonder why we bother with BLB when we have such a long deleted item retention period: a)It is occasionally handy to restore an individual email without using a separate restore server b)Restoring an single email can be quicker - hero factor when someone's in trouble! c)Gives a belt and braces approach to backup But, but, but...! With such a long DIR period, you don't NEED BLB to do a), b), c)!!! ::confused:: No separate restore server is needed; and DIR is quick, quick, quick (vite, even!). re: c) -- my dentist said that braces probably wouldn't do me any good -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I am in shape. Round is a shape... - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:04 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least Computer Associates product doesn't). 4. The alternative is so much easier and cleaner - deleted item retention. Set deleted item retention to say 30 days, a little user education and they can do their own mailbox' restore. 3. Regular use of exmerge (to pst files for backup) for important mailboxes is another alternative. 2. Section 3.11 at: http://www.swinc.com/resource/exch_faq_sec3.htm says so (ok, I don't do everything I'm told either). 1. The archives at the Exchange list at swynk.com are full of Brick-level horror stories. -William Lefkovics, MCSE, A+ (and a brand new Exchange MVP!) ** Brick Level Backups will not cause your car to rust out or your hair to fall out. They are unlikely to make your system less reliable (but no guarantees there), nor make your normal non-brick-level backups less reliable. They do, however, use more tape, make your backup jobs take more time and wear your tape drive out faster. They give you a false sense of security that you can get something back when in fact you may not. And you often cannot get everything back from a brick level backup. Brick Level Backup is a kludgy crutch for
RE: How many of you use Message Level Recovery ?
Horses for Courses - It really does depend on your type of business environment. On this particular customer site, some sales deals in one department can take a year to complete. I have been asked to retrieve mails from 6 -7 months previous (The answer at the time was no as we did not do Brick Level Backup, and I was not going to restore the whole Private store for one mail unfortunately the user had deleted the archive.pst) After getting it in the neck for that one, we are now doing BLB's P.S. What is the maximum retention time with E2K anybody know? SB -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 4:29 PM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? Why the !? I have been using a DIR period of 35 days ever since going live with Exchange 5.5 2 years ago. In all of that time, we have NEVER had to do a message or mailbox restore from tape. -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - Motivational Speaker Klingon: EVERY day is a good day to die! Say it with me! - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 11:14 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? People sometimes want a mail restored that they deleted more than 90 days ago! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 14:10 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? You may wonder why we bother with BLB when we have such a long deleted item retention period: a)It is occasionally handy to restore an individual email without using a separate restore server b)Restoring an single email can be quicker - hero factor when someone's in trouble! c)Gives a belt and braces approach to backup But, but, but...! With such a long DIR period, you don't NEED BLB to do a), b), c)!!! ::confused:: No separate restore server is needed; and DIR is quick, quick, quick (vite, even!). re: c) -- my dentist said that braces probably wouldn't do me any good -Michèle Immigration site: http://LadySun1969.tripod.com Our new 2001 Miata: http://members.cardomain.com/bpituley Tiggercam: http://www.tiggercam.co.uk - I am in shape. Round is a shape... - -Original Message- From: Andrew Goddard [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:04 AM To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? We use it quite successfully, but only subject to the following: 1) We also do a full regular backup each night 2) We have a backup window than allows both BLB and full backup each time 3) We have enough space on the tapes for BLB and full backups 4) We use Veritas (not ArcServe!) 5) We have a long deleted item retention period (90 days) so individual message recovery is rarely needed. 6) It has never caused any faults 7) It is regularly tested You may wonder why we bother with BLB when we have such a long deleted item retention period: a) It is occasionally handy to restore an individual email without using a separate restore server b) Restoring an single email can be quicker - hero factor when someone's in trouble! c) Gives a belt and braces approach to backup I would _never_ recommend only doing BLB, but if 1-7 above are all OK then it can be useful. I think if you restore from a full backup, exmerge a couple of emails out of the restore and then into the production server, you lose SIS for these emails. For a full restore I'd always use the full backup not the BLB. Hope this helps Cheers, Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: 30 October 2001 20:21 To: MS-Exchange Admin Issues Subject: RE: How many of you use Message Level Recovery ? http://mail.tekscan.com/nomailboxes.htm http://www.swinc.com/resource/exch_faq_appxf.htm from the archives ** The Top Ten Reasons why William Doesn't recommend Brick-level backups: 10. The only product he's tried it with is ArcServeIT (*shudder*) 9. Brick-level backups should be done in conjunction with regular backups therefore duplicating the process. 8. Brick-level backups don't clear the transaction logs 7. Brick-level restores (esp of the entire store) are VERY slow 6. Brick-level restores result in loss of Single Instance Storage 5. Brick-level backups do not properly maintain all of the data structures in the store that you might need for a full restore (at least
RE: Eseutil
Title: Message My wife says that, too. -Original Message-From: Kevin Miller [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 8:25 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Most the people here who use it on a monthly basis would have a very difficult time explaining what the log files are, what they are used for, and why they are there. don't go by them. Listen to people who know what they are talking about. DON'T TOUCH eseutil unless you are on the phone with PSS or know what you are doing and have a very good backup. The best maintance for Exchange is apply service packs. other then that nothing needs to be done. The longera server is up the better. Kevinm M WLKMMAS, UCC+WCA, CKWSE -Original Message-From: Dimitri Limanovski [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:13 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil So what is the best practice with defragmentation? MS says that "ESEUITL is not considered a tool for regular maintenance andshould only be used in case of emergency after contacting Microsoft Technical Support". On the other hand, there're people here that use it on monthly basis! So, to use or not to use? -Original Message-From: Kopec, David [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 10:41 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil This statement is NOT entirely accurate. Try the following syntax and you can direct wherever you want including mapped drives. For example, C:\exchsrver/bineseutil /d /ispriv /tf:\tempedb.edb. Notice, there is no space between the /t and the drive you wish to defrag on. -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 9:23 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil I'm not familiar with E2K, but on 5.5 I regularly (read monthly) run eseutil. I run it because that is the ONLY way to regain space in the Exchange DB that has been freed up by messages being deleted etc. If I did not do this on a regular basis I would hit the Exchange 5.5 IS limit. I would guess that it would be /t f:/tempedb.edb or what ever you plan to use for the defrag. It may not work, it doesn't work in 5.5 when you try to redirect the temp database, it must run on the same physical drive that it is stored. Good luck. Sherry -Original Message-From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:34 AMTo: MS-Exchange Admin IssuesSubject: RE: Eseutil Why do you need to defrag the IS? Has MS told you to do this? eseutil is a tool that if you are not familiar with, you shouldn't be using. Now tell us why you want to do it. -Original Message-From: Irfan GM [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 12:19 AMTo: MS-Exchange Admin IssuesSubject: Eseutil Hi How do I use the /t switch with eseutil , i need to defrag the database and there is not enogh storage space in C: , where exchange 2000 is loaded. Thanks Irfan List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Exch5.5 and Linux firewall
Why Linux? BSD, dude. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 5:39 AM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall My philosophy that if you have only one exchange server, two or less sites, one T1 or less, and one way out to the Internet you do not need an expensive or complicated firewall (PIX, Nokia/Checkpoint). If you are handy build a Linux Firewall if not get a watchgaurd or sonicwall. This philosophy is cheaper, better, and easier for small to midsize organizations to manage. -Original Message- From: Robin Lawrie [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 3:47 AM To: MS-Exchange Admin Issues Subject:RE: Exch5.5 and Linux firewall We've got one herevery good, but not cheap. -Original Message- From: Bob Peitzke [mailto:[EMAIL PROTECTED]] Sent: 31 October 2001 00:48 To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall Just get a Nokia firewall appliance that comes with Checkpoint Firewall-1 4.1. It's OS is a stripped-down version of BSD Unix, and even a dummy like me can manage the firewall through its GUI interface. Very secure, very reliable. We got the IP 330 model with 3 interfaces for private, public DMZ. Works great. HTH Bob Peitzke -Original Message- From: Lefkovics, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:19 PM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall There is only one. www.openbsd.org Well... there's only one that's close. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall I am still waiting for a secure OS - could you point me in that direction. I need one badly. If I had a secure OS I could spend 5-8% of my work time sleeping. ellery -Original Message- From: Lefkovics, William [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 10:54 AM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall your Linux Firewall or if you'd prefer, a firewall on a secure OS. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 6:16 AM To: MS-Exchange Admin Issues Subject: RE: Exch5.5 and Linux firewall Yes unless your smtp mail is coming in on a different port (which is very unlikely). Depending on your firewall I would have port 25 be able to go to that specific computer ipaddress. If you plan to run OWA you can still use SSL and port 443 with a Linux firewall. Not to get into an argument but MS Proxy is not really and firewall and your Linux Firewall will probably increase your security 90% or more. ellery july Technical Lead Northwest Area Foundation 332 Minnesota e-1201 St. Paul, MN 55101 email - [EMAIL PROTECTED] phone - 651-225-3895 fax - 651-225-7695 -Original Message- From: Fred Valdez [mailto:[EMAIL PROTECTED]] Sent: Monday, October 29, 2001 6:03 PM To: MS-Exchange Admin Issues Subject: Exch5.5 and Linux firewall Hello All, Does anyone have experience with exchange 5.5 behind a Linux firewall? I would like to use the firewall the same way ms proxy 2.0 is used. Basically, do I have to open port 25 on Linux and have it rout that traffic to exchange?... thanks, Fred Valdez GSRINC Network Administrator List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
RE: Pix Firewall
Title: Message If it is new it is time to call Cisco TAC. You may have a defective card. Either way Cisco will rule out if it is a PIX issue. ellery -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 9:33 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall OK, I tried the DNS test below and everything worked fine. I got the 220 message on both attempts. The queue failure on outgoing messages says The remote server did not respond to a connection attempt. -Original Message- From: Purviance, Chad [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 9:47 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall You said you can Telnet out on Port 25 but you didnt say if it was by name. IE check the DNS on outbound. The messages in Queue have a failure status. What is it?? IE Host unknown, network error, didnt send cash to BillG?? This will usually show you more of what is going on. The SMTP fix-up will kill you on Exchange to Exchange SMTP connections, but not non-exchange. Kill it or but a non ESMTP server in front as a relay like IIS. Try TELNET 209.43.20.203 25 Then Try TELNET MAIL.IQUEST.NET 25 The responses should be 220 iquest3.iquest.net ESMTP If the first works and not the second, you probably have a DNS issue on the Exchange server. Chad P. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 9:10 AM To: [EMAIL PROTECTED] Subject: RE: Pix Firewall ya the mail is all sitting in the queue set to retry. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:40 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Did you check the mail queue to see if the mail is there? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 7:37 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Dns records are forwarding and MX record is being populated. I can telnet out on port 25. It seems to me that the mail is being stopped at the exchange server. I can send mail in fine just outbound doesn't work. I haven't disabled the fixup yet I am going to try that next. -Original Message- From: Ellery July [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:28 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Are your DNS records (forwarding) good i.e. is your MX record being populated well? ß this is a weird question to ask but just checking a low chance hunch. Is the mail being stopped on the exchange server or held in the senders mailbox? Can you telnet or ping from your box to the outside world using port 25 and/or 110? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 6:55 AM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Yes and Yes to your questions. Sorry for the seamingly dumb response a little tired after a day of fighting fires. Thanks for your help Jonathan -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 4:18 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Uhh YEAH! I guess with a question like that I should ask, do you have an MX record for that server? Do you have the IP address for that MX record assigned to your server? -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 1:07 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Do I use the public address if I am already NATing it? -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 3:15 PM To: MS-Exchange Admin Issues Subject: RE: Pix Firewall Disable the SMTP Fixup for starters. Conduit Permit tcp host x.x.x.x (the IP address of your Exchange server, the public one that is) eq smtp any -Original Message- From: Jonathan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 30, 2001 12:13 PM To: MS-Exchange Admin Issues Subject: Pix Firewall I am really stumped on this one and am hoping that I am just missing something simple. I have a new Cisco pix firewall in place and I am not able to send mail from my Exchange box to the outside world. I receive mail just fine. I have gone thru the rules and everything looks good and nothing in the error logs either but still can't send mail out. Any ideas on stuff I might have missed? Thanks everyone, Jonathan List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at:
RE: Email Delayed Internally !
Title: Message I have never experienced this feature. William Lefkovics, MCSE, A+ Apologizing for Microsoft *features* since 1987. -Original Message-From: Abercrombie, Sherry [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 6:25 AMTo: MS-Exchange Admin IssuesSubject: RE: Email Delayed Internally ! Don't really have an answer for your, but I have had it happen here on more than one occasion and could never find a reason..it's a "feature" -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 31, 2001 8:06 AMTo: MS-Exchange Admin IssuesSubject: RE: Email Delayed Internally ! Decaf! - get off this list... Lots of possibilities, none easily tracked. Could it have been resent, or moved from the deleted folder to the outbox? Or it could just be another one of those FM things (M= Magic). Nothing like instilling confidence in the system. -Original Message-From: Ropiak Steve - NAO Florence Office Exchange and Bar Code Admn. [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 4:15 AMTo: MS-Exchange Admin IssuesSubject: RE: Email Delayed Internally ! Should NEVER switch to decaf mid week. Just reread the post, it was an internal mail. Are you sure the mail was sent that long ago and not just an incorrect date/time on the sender's computer? mit freundlichen Grüßen,(Best Regards), Steve Ropiak ZF Group NAO CERT, Exchange and Bar Code Administrator -Original Message-From: Iain Rhodes [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 31, 2001 5:56 AMTo: MS-Exchange Admin IssuesSubject: Email Delayed Internally ! A user has just received an internal email that was sent 15 days ago !! Has anyone seen this before or any ideas on how this could happen? We are running Groupshield but there was nothing in the email except an legitimate URL Iain Rhodes t: 020 7393 1329 f: 020 7436 4789 www.pricejam.com 'pricejam to go' Our website in the palm of your hand -PDA users can subscribe at www.pricejam.com The information in this email and in any attachments is confidential and intended solely for the attention and use of the named addressee(s).Internet communications are not secure and therefore pricejamieson does not accept legal responsibility for the contents of this message. Any views or opinions expressed are solely those of the author and do not necessarily represent those of pricejamieson unless otherwise specifically stated. This e-mail message has been scanned and cleared by Network Associates Total Virus Defence http://www.nai.com List Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htmList Charter and FAQ at:http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
