RE: Running a file level scanner on exchange dirs???

2001-12-03 Thread Howie Pince

I'm using Nav 7.5 on my exchange server and it has found a few viri over the
past few weeks in the IMC dir.

Is this dangerous to scan the exchange dir, and quarantine viri if found?

If so why?

Thanks inavance,

Howie

Howie Pince
Network Administrator
A+, MCSE 2000
Higher Dimension Research Inc.
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 
651-256-1987
www.superfabric.com http://www.superfabric.com 
 
 
 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Sunday, December 02, 2001 5:25 PM
To: MS-Exchange Admin Issues
Subject: RE: Exchange partition getting huge over the weekend... : found
o ut!!!


I do (with ServerProtect), but I exclude the exchsrvr directories from the
scan. Seems to work well.

Evan


 -Original Message-
From:   Jason Dwyer [mailto:[EMAIL PROTECTED]] 
Sent:   Sunday, December 02, 2001 6:11 PM
To: MS-Exchange Admin Issues
Subject:RE: Exchange partition getting huge over the weekend... :
found o ut!!!

A client of mine did, and it wiped their entire information store and all
mailbox contents

Regards,

Jason Dwyer



-Original Message-
From: Kevin Miller [mailto:[EMAIL PROTECTED]]
Sent: Monday, 3 December 2001 6:55 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange partition getting huge over the weekend... : found
out!!!


Please tell me you did not run a file level scanner on the server.

Kevinm M WLKMMAS, UCC+WCA, CKWSE CKST


-Original Message-
From: Eric Mailloux [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, December 02, 2001 11:41 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange partition getting huge over the weekend... : found
out!!!


Antivirus software

I have a planned virus scan on sunday midnight That's the
reason for the unusual amount of log files...


Bye,

Eric

-Message d'origine-
De : Eric Mailloux 
Envoyé : 2 décembre, 2001 14:02
À : MS-Exchange Admin Issues
Objet : Exchange partition getting huge over the weekend...


Hello!

Exchange 2000 SP1.

The Exchange partition (M:\ drive) gets huge overly fast during the
weekend  : from 2.1GB on friday PM to almost 9.0GB on monday AM. No one
is at the office during that time. I only have about 50 mailboxes on the
server. What causes the log files to get this numerous this fast, over
the weekand when it is not the case during the week? Is there a way or a
tool that would allow me to view all the activity that went on on the
mail server???

Could it be that I am being used as a relay???


Thank you! 


Eric Mailloux
Administrateur réseau
Groupe TelPlus Inc.
(418) 524-9455, poste 109
 

L'information que contient ce courriel est confidentielle et peut
contenir des informations privilégiées sur le plan technique et/ou
juridique. Si vous avez reçu ce courriel par erreur, veuillez nous en
aviser immédiatement par courriel. Veuillez également supprimer ce
courriel de votre système, vous abstenir de le copier ou de l'utiliser
pour quelque raison, ni en divulguer le contenu à quiconque.
 
The information in this email is confidential and may be legally and/or
technically privileged. If you have received this e-mail in error,
please reply immediately by e-mail and then delete this message from
your system. Please do not copy or use this email for any purposes, or
disclose its contents to any other person.


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm




RE: Running a file level scanner on exchange dirs???

2001-12-03 Thread John Matteson

PLEASE READ THE FAQ!!

Do not, REPEAT Do NOT, run a file level scanner on your Exchange server. You
will F*SCK up many files that are necessary for Exchange to operate
correctly.

USE ONLY AN EXCHANGE AWARE SCANNER like TREND MICRO's SCAN MAIL.

If you (or your pointed headed boss) insist on running a file level scanner
on an Exchange server, EXCLUDE any and all directories that are named
EXCHSRVR and all the subdirectories. This will minimize that you will F*SCK
up important Exchange files.

John Matteson; Exchange Manager 
Geac Corporate Infrastructure Systems and Standards 
(404) 239 - 2981 

Believe nothing because it is written in books. Believe nothing because wise
men say it is so. Believe nothing because it is religious doctrine. Believe
it only because you yourself know it to be true. -- Buddha


-Original Message-
From: Howie Pince [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 03, 2001 9:45 AM
To: MS-Exchange Admin Issues
Subject: RE: Running a file level scanner on exchange dirs???


I'm using Nav 7.5 on my exchange server and it has found a few viri over the
past few weeks in the IMC dir.

Is this dangerous to scan the exchange dir, and quarantine viri if found?

If so why?

Thanks inavance,

Howie

Howie Pince
Network Administrator
A+, MCSE 2000
Higher Dimension Research Inc.
[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] 
651-256-1987
www.superfabric.com http://www.superfabric.com 
 
 
 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Sunday, December 02, 2001 5:25 PM
To: MS-Exchange Admin Issues
Subject: RE: Exchange partition getting huge over the weekend... : found
o ut!!!


I do (with ServerProtect), but I exclude the exchsrvr directories from the
scan. Seems to work well.

Evan


 -Original Message-
From:   Jason Dwyer [mailto:[EMAIL PROTECTED]] 
Sent:   Sunday, December 02, 2001 6:11 PM
To: MS-Exchange Admin Issues
Subject:RE: Exchange partition getting huge over the weekend... :
found o ut!!!

A client of mine did, and it wiped their entire information store and all
mailbox contents

Regards,

Jason Dwyer



-Original Message-
From: Kevin Miller [mailto:[EMAIL PROTECTED]]
Sent: Monday, 3 December 2001 6:55 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange partition getting huge over the weekend... : found
out!!!


Please tell me you did not run a file level scanner on the server.

Kevinm M WLKMMAS, UCC+WCA, CKWSE CKST


-Original Message-
From: Eric Mailloux [mailto:[EMAIL PROTECTED]] 
Sent: Sunday, December 02, 2001 11:41 AM
To: MS-Exchange Admin Issues
Subject: RE: Exchange partition getting huge over the weekend... : found
out!!!


Antivirus software

I have a planned virus scan on sunday midnight That's the
reason for the unusual amount of log files...


Bye,

Eric

-Message d'origine-
De : Eric Mailloux 
Envoyé : 2 décembre, 2001 14:02
À : MS-Exchange Admin Issues
Objet : Exchange partition getting huge over the weekend...


Hello!

Exchange 2000 SP1.

The Exchange partition (M:\ drive) gets huge overly fast during the
weekend  : from 2.1GB on friday PM to almost 9.0GB on monday AM. No one
is at the office during that time. I only have about 50 mailboxes on the
server. What causes the log files to get this numerous this fast, over
the weekand when it is not the case during the week? Is there a way or a
tool that would allow me to view all the activity that went on on the
mail server???

Could it be that I am being used as a relay???


Thank you! 


Eric Mailloux
Administrateur réseau
Groupe TelPlus Inc.
(418) 524-9455, poste 109
 

L'information que contient ce courriel est confidentielle et peut
contenir des informations privilégiées sur le plan technique et/ou
juridique. Si vous avez reçu ce courriel par erreur, veuillez nous en
aviser immédiatement par courriel. Veuillez également supprimer ce
courriel de votre système, vous abstenir de le copier ou de l'utiliser
pour quelque raison, ni en divulguer le contenu à quiconque.
 
The information in this email is confidential and may be legally and/or
technically privileged. If you have received this e-mail in error,
please reply immediately by e-mail and then delete this message from
your system. Please do not copy or use this email for any purposes, or
disclose its contents to any other person.


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm


List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm



List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com