RE: Email Viruses

2001-09-26 Thread Preston C. Jeffares

Oh wait... you mean you can use wildcards with Antigen?!  So typing out
that whole list was a waste?!
 
hehahahah
 
Preston Craig Jeffares
Network Engineer
Georgia Department of Motor Vehicle Safety
-Original Message-
From: Sean Martin [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 25, 2001 5:23 PM
To: MS-Exchange Admin Issues
Subject: RE: Email Viruses


Why on earth would you want to list every specific file name for such
file types when you can easily use a wildcard?? e.g. *.bat
 
Regards,
 
Sean Martin, MCSE
Network Administrator
Ribelin Lowell  Company
Insurance Brokers, Inc.
3111 C Street, Suite 300
Anchorage, Alaska 99503
Ph: (907) 561-1250
Fax: (907) 561-4315
Cell: (907) 229-0885
Email:  mailto:[EMAIL PROTECTED]
[EMAIL PROTECTED]
-Original Message-
From: Clark, Steve [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 25, 2001 1:02 PM
To: MS-Exchange Admin Issues
Subject: RE: Email Viruses


I got this from a listing months ago. Some of it is not realistic:
 
All EXE's
midgets.scr
sexy virgin.scr
blanca de nieve.scr
branca de neve.scr
an?o porn?.scr
dunga.scr
blanche.scr
sexynain.scr
zipped_files.exe
ANTI_CIH.EXE
SEICHO-NO-IE.EXE
AVP_Updates.EXE
QI_TEST.EXE
LOVE_LETTER_FOR_YOU.TXT.pif
I_wanna_see_you.txt.pif
NEW_NAPSTER_site.TXT.pif
BILL_GATES_PIECE_JPG.pif
TIAZINHA.JPG.pif
BLINK_182.MP3.pif
Geocities_Free_sites.TXT.pif
FEITICEIRA_NUA.JPG.pif
METALLICA_SONG.MP3.pif
INTERNET_SECURITY_FORUM.DOC.pif
WIN_$100_NOW.DOC.pif
JIMI__HMNDRIX.MP3.pif
READER_DIGEST_LETTER.TXT.pif
IS_LINUX_GOOD_ENOUGH!.TXT.pif
YOU_are_FAT!.TXT.pif
I_am_sorry.DOC.pif
FREE_xxx_sites.TXT.pif
Sorry_about_yesterday.DOC.pif
Me_nude.AVI.pif
Protect_your_credit.HTML.pif
NEW_playboy_Screen_saver.SCR
FUCKING_WITH_DOGS.SCR
MATRIX_2__is_OUT.SCR
MATRiX_Screen_Saver.SCR
HANSON.SCR
ALANIS_Screen_Saver.scr
IUVIX.GIF.vbs
RUWIYIV.GIF.vbs
XIDOFU.BMP.vbs
BIGO.GIF.vbs
EOJU.JPG.vbs
EEIO.BMP.vbs
BUGIJI.JPG.vbs
KOQES.JPG.vbs
IUNE.JPG.vbs
AIFOHUEE.BMP.vbs
NISOVORE.GIF.vbs
XISI.BMP.vbs
EEKIMO.JPG.vbs
MUREUI.GIF.vbs
MURITI.GIF.vbs
COHU.JPG.vbs
YUFEH.BMP.vbs
MIYEBEW.GIF.vbs
EUJIL.BMP.vbs
JEFIHO.JPG.vbs
JIOOR.BMP.vbs
UIAOCUYE.BMP.vbs
CUHEJE.GIF.vbs
DUIIKI.JPG.vbs
VEGIIIF.BMP.vbs
UEAOCOY.BMP.vbs
EUJEL.JPG.vbs
HENIPOL.JPG.vbs
VUBIEI.GIF.vbs
IUNIQIM.JPG.vbs
SOXU.BMP.vbs
TEYICI.BMP.vbs
NIPO.GIF.vbs
AUFEHI.JPG.vbs
XIYUBUX.GIF.vbs
FIWUYUV.JPG.vbs
SIGUIUF.GIF.vbs
Very Funny.vbs
ILOVEYOU (subject)
AnnaKournikova.jpg.vbs
ANNAKO~1.vbs
baby.exe
boss.exe
Pretty Park.exe
xromeo.exe
runme.hta
LIFE_STAGES.TXT.SHS
Survivors Print jpeg.JPG.exe
???q.exe
?q?l??1.exe
Rec area.shs
Prosp P1 Color Cover Page.doc.shs
3bresim.pif
Shifra.JPG PC.exe
matcher.exe
JUXTLAHUACA 1.doc.pif
advantage rent-a-car.doc.com
VIAJEROS MES DE JUNIO.doc.bat
resume.doc.com
AAJVITAE.doc.bat
Credenciales.doc.lnk
Ingreso de FCL.doc.bat
Envelop1.doc.bat
NUREF2.xls.com
PRENSA CLASIFICADO.doc.com
 
-Original Message-
From: Rudy Lovato [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 25, 2001 2:44 PM
To: MS-Exchange Admin Issues
Subject: Email Viruses
 
Anybody have any ideas on what extensions to block for viruses  I
have (.vbs, .bat, .com, .exe, .vbe, .dll, .mp3) any others?  
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

DO NOT read, copy or disseminate this communication unless you are the
intended addressee. This e-mail communication contains confidential
and/or privileged information intended only for the addressee. If you
have received this communication in error, please call us immediately at
(907) 561-1250 and ask to speak to the sender of the communication.
Also, please e-mail the sender and notify the sender immediately that
you have received the communication in error.

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: Off topic ... blocking chat programs

2001-09-19 Thread Preston C. Jeffares

Well you almost got it but you have to be a little more tenacious to
really block it effectively.  On AIM you have to block every port going
to those addresses.  In the AOL IM setup you can change the port number
to 80 for example and connect to the servers.  Then you have to take
into account that users can go to http://www.aol.com/aimexpress/
http://www.aol.com/aimexpress/  and use the web client.  So, depending
on how strict you get you might have to block access to all of the
www.aol.com http://www.aol.com  IP's.  So, basically... it's a losing
battle to say the least.  I would recommend getting management to do
their job and proactively enforce policies... rather than trying to
block access to the wide gamut of chat clients.
 
Preston Craig Jeffares
Network Engineer
Georgia Department of Motor Vehicle Safety

-Original Message-
From: Simon Curtiss [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 7:32 AM
To: MS-Exchange Admin Issues
Subject: RE: Off topic ... blocking chat programs


Found it
 
AOL IM - block port 5190 on:
205.188.3.160
205.188.3.176
205.188.5.204
205.188.5.208
205.188.7.164
205.188.7.168
205.188.7.172
205.188.7.176
 
ICQ - block port 5190 on:
64.12.162.57
205.188.179.233
 
MSN block 64.4.13.17
 
Yahoo block port 5050 on:
 aaagh too many
 
basically 216.136.175. 142 to 145
216.136.224.213 to 214
216.136.225.11, 12, 35,36,83,84
216.136.226. 117 to 118
216.136.131.93
 
 
Stu wrote he wqas going to block all ports to those IP addresses on his
PIX and that AOL changes the IP addresses every 6 months - thanks AOL!
 
Simon

-Original Message-
From: Irfan GM [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, 19 September 2001 11:22 p.m.
To: MS-Exchange Admin Issues
Subject: RE: Off topic ... blocking chat programs


anyway thanks simon , looking forward for your inputs

-Original Message-
From: Simon Curtiss [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 4:53 PM
To: MS-Exchange Admin Issues
Subject: RE: Off topic ... blocking chat programs


Seriously, look at the archives of the Sunbelt Win-Security list -
there was a list of ports in the W2K newsletter the other week, I've got
a copy but I can't find it right now. I'll see if I can find it in the
morning, it's 11:20 pm and I'm just finishing a bad evening in which I
got nowhere - (put long boring story here)
 
Simon

-Original Message-
From: Irfan GM [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, 19 September 2001 10:56 p.m.
To: MS-Exchange Admin Issues
Subject: Off topic ... blocking chat programs





  Hi guys , 

 Slightly off topic , but chose this forum , hoping for an answer. 
 My question is how do i block chat programs like icq, msn messenger etc
. 
 I have windows 2000 domain with no proxy server , can i do it using DNS
server ? 
 so that all these chat programs resolve their respective ip addresses
internally ? 

 Thanks 
 Irfan 

  
  

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


  _  


Notice of Confidential information 

The information contained in this electronic mail is CONFIDENTIAL
INFORMATION and may be LEGALLY PRIVILEGED, intended only for the
individual or entity named above. If you are not the intended recipient,
you are hereby notified that the use, dissemination, distribution, or
copying of this document is strictly prohibited. If you have received
this electronic message in error, please immediately notify us by return
or telephone (call collect to 07 577 6049) and destroy the original
message. Thank you. . 

This e-mail message has been scanned and cleared by MailMarshal
www.marshalsoftware.com http://www.marshalsoftware.com/  

  _  

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


  _  


Notice of Confidential information 

The information contained in this electronic mail is CONFIDENTIAL
INFORMATION and may be LEGALLY PRIVILEGED, intended only for the
individual or entity named above. If you are not the intended recipient,
you are hereby notified that the use, dissemination, distribution, or
copying of this document is strictly prohibited. If you have received
this electronic message in error, please immediately notify us by return
or telephone (call collect to 07 577 6049) and destroy the original
message. Thank you. . 

This e-mail message has been scanned and cleared by MailMarshal
www.marshalsoftware.com http://www.marshalsoftware.com/  

  _  

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: Backing up Exchange with Veritas Backup Exec 8.x

2001-09-04 Thread Preston C. Jeffares

**NOISE WARNING**
 
Who write the baddest raps you and your boys have ever heard
I eat you up and give your girl a bowl of Puppy Chow
You understand alright? Hello! I'm tryin to tell you now
Who stands, who falls, who crowds the halls
This one the DJ calls... 
 
- Slick Rick
 
*Note... Slick Rick and Pharcyde were just in Atlanta for FREE... and I
had to work.  U... damn migration!
-Original Message-
From: Clark, Steve [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 04, 2001 10:36 AM
To: MS-Exchange Admin Issues
Subject: RE: Backing up Exchange with Veritas Backup Exec 8.x


How about a quote from Slick Rick?
 
Steve Clark
Clark Systems Support, LLC
AVIEN Charter Member
www.clarksupport.com
  301-610-9584 voice
  240-465-0323 Efax
 
-Original Message-
From: Bill Higgins [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 04, 2001 10:35 AM
To: MS-Exchange Admin Issues
Subject: RE: Backing up Exchange with Veritas Backup Exec 8.x
 
William (1) is not a freak...
 
He is a superfreak (2)
 
(1) Hi William
(2) Apologies to any Rick James fans
-Original Message-
From: Clark, Steve [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 04, 2001 07:32
To: MS-Exchange Admin Issues
Subject: RE: Backing up Exchange with Veritas Backup Exec 8.x
You're a freak you know that?
 
Steve Clark
Clark Systems Support, LLC
AVIEN Charter Member
www.clarksupport.com
  301-610-9584 voice
  240-465-0323 Efax
 
-Original Message-
From: Lefkovics, William [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 04, 2001 10:29 AM
To: MS-Exchange Admin Issues
Subject: RE: Backing up Exchange with Veritas Backup Exec 8.x
 
What you are missing, Kevan is a recovery server.  Hopefully the one you
periodically test your restores on.  
 
kevin
les
drew
michèle
you *do* test your backups by doing regular restores,
right?
/michèle
/drew
/les
/kevin
 
 
-Original Message-
From: Kevan Dickinson [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 04, 2001 7:04 AM
To: MS-Exchange Admin Issues
Cc: Mark Newton
Subject: RE: Backing up Exchange with Veritas Backup Exec 8.x
Using Deleted Items Retention is OK for recovering individual messages
but what happens if the whole Mailbox is Corrupt.
If you have not Backed Up individual Mailboxes and you need to recover
One individuals Mail Box by restoring the whole of Exchange, then
everyone would lose their mail up to the last Back Up.
 
If I am missing something here please correct me.
 
We also use BackUp Exec and have had no problems with it so far,
 
Kevan Dickinson
 
 
-Original Message-
From: Clark, Steve [mailto:[EMAIL PROTECTED]]
Sent: 04 September 2001 14:23
To: MS-Exchange Admin Issues
Subject: RE: Backing up Exchange with Veritas Backup Exec 8.x
Ok, I've looked at this and am trying to implement. But one thing has me
puzzled, I have enabled the deleted item retention set for 30 days as
you recommend but when I go into OutLook and try to recover an item, the
option is grayed out. Is the action only avail on the server?
 
Steve Clark
Clark Systems Support, LLC
AVIEN Charter Member
www.clarksupport.com
  301-610-9584 voice
  240-465-0323 Efax
 
-Original Message-
X-Sybari-Space:    
From: Martin Blackstone [mailto:[EMAIL PROTECTED]]
Sent: Friday, August 31, 2001 1:43 PM
To: MS-Exchange Admin Issues
Subject: RE: Backing up Exchange with Veritas Backup Exec 8.x
 
Full backups Daily.
Backup the IS and DS 
Do Not Backup Individual Mailboxes
 
Implement 30 day Deleted Items Retention in Exchange. You will never
need to restore again.
 
As for OFM, People say to stay away. I have personally seen it running
in 8.5 on an Exchange server daily and it worked great, though you were
essentially backing up everything twice. But I believe the rule of thumb
is don't use it.
-Original Message-
From: Sethi, Ali [mailto:[EMAIL PROTECTED]] 
Sent: Friday, August 31, 2001 9:41 AM
To: MS-Exchange Admin Issues
Subject: Backing up Exchange with Veritas Backup Exec 8.x
Hello,
For those of you that use Veritas Backup Exec to backup the Exchange
server, what type of back up jobs do you run? Daily Differentials and
Full every Friday. DO you backup the IS and the individual mailboxes
every evening or just the IS. I think we here have been backing up the
individal mailboxes every day as well since we have had numerous
problems with users accidentally deleting stuff and needing it restored.

Also do most of you utilize the Open File option in veritas as you may
have users in email while it is being backed up?
I just wanted to get an idea of what type of backup strategy is used by
others.
Thanks, 
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm
List Charter and FAQ at: