Well, here's the secret. Don't tell anybody else or we'll have to come up
with something else. Ready?
1) We patch our servers
2) We block executables.
Man, now it's out. I feel so USED!
Dale L. Orr
Network Administrator
DoD Polygraph Institute
-Original Message-
From: Jennifer Bak
All current IIS patches.
Mail scanned by www.messagelabs.com
Firewall set to block .eml[1]
Users housetrained.
[1] Thanks to a tip on the Raptor mailing list
Les Bessant mailto:[EMAIL PROTECTED]
IT Manager, Sanderson Townend & Gilbert
Acting in a personal capacity
http://www.tiggercam.co.uk
We don't need no stinkin' patches!
Andy David
J Muller International
-Original Message-
From: Jennifer Baker [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 06:10 AM
To: Exchange Discussions
Subject: today's admin backwards virus
I was just noticing that most of the
Jennifer,
What AV are you using? Most (all?) are capable of auto-update. I use
Symantec and grab updates 4 times a day automatically. Scanning mboxes is
automatic too. Patching servers doesn't take all that long. Cleaning up from
a hit, well that's another story, we've been lucky so far.
-Or
: Exchange Discussions
Subject: RE: today's admin backwards virus
Jennifer,
What AV are you using? Most (all?) are capable of auto-update. I use
Symantec and grab updates 4 times a day automatically. Scanning mboxes is
automatic too. Patching servers doesn't take all that long. Cleaning up
All of our AV stuff is essentially done automatically, updates and mailbox
scans are scheduled and run automatically. We still have to pop in and
ensure that everything is running as it should etc. but that doesn't take
too long in the run of a day/week. What does take some time is keeping up to
d
Jennifer,
Most everyone has already hit on the obvious, most of us use the auto-update
feature from the A/V product of our choosing. Then we go the extra step and
use some sort of filtering, be it at the fire wall or just simple attachment
blocking in our e-mail server A/V product. Here I block
> Oh, the other thing we did was, well we threw IIS right out
> the window!!
so how are you hosting? do your users miss owa?
dan.
_
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: htt
or scanning for
certain language/words. Any opinions would help.
Thanks!
Matt
-Original Message-
From: Waters, Jeff [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 11:33 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
Jennifer,
Most everyone ha
Message-
From: Matt Hoffman [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 9:00 AM
To: Exchange 5.5 List
Subject: RE: today's admin backwards virus
So, does anyone have a strong opinion on what filtering software to use? We
haven't done anything along those lines before
L PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 12:02 PM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
Blocking for certain words is an important part of filtering for viruses in
my opinion.
Ken Powell
Systems Administrator
Clark Co
claimers or
scanning for certain language/words. Any opinions would help.
Thanks!
Matt
-Original Message-
From: Waters, Jeff [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 11:33 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
Jennifer,
Most
September 19, 2001 11:53 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
> Oh, the other thing we did was, well we threw IIS right out
> the window!!
so how are you hosting? do your users miss owa?
dan.
_
I'm not an administrator. I'm a CEO. Works for me.
(:=
Great Cthulhu Jones
CEO, R'lyeh Consulting
http://www.zzzptm.com/cthulhu
http://www.bad-managers.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jennifer Baker
Sent: Wednesday, September 19, 2001
s (OBIS)
Vancouver, Washington
[EMAIL PROTECTED]
Voice: (360) 397-6121 x4658
Fax:(360) 759-6001
-Original Message-
From: Matt Hoffman [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 9:08 AM
To: Powell, Ken
Subject: RE: today's admin backwards virus
Well, there&#
oned that it was not of great
> concern.
>
> Matt
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, September 19, 2001 12:02 PM
> To: Exchange Discussions
> Subject: RE: today's admin backwards virus
>
>
&g
, would be most helpful.
Matt
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 12:22 PM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
The nice thing about MAILsweeper for SMTP (and I'm assuming others -
EMAIL PROTECTED]
Voice: (360) 397-6121 x4658
Fax:(360) 759-6001
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 9:29 AM
To: Exchange 5.5 List
Subject: RE: today's admin backwards virus
The nice thing about MAILsweeper for SMT
You have it set up to send all attatchments to administrator email box?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 2:16 PM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
Good points Eric. Th
-Rapaport [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 11:18 AM
To: Powell, Ken
Subject: RE: today's admin backwards virus
You have it set up to send all attatchments to administrator email box?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 2:22 PM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
No, Webshield places the messages in a Quarantine folder and can be viewed
with Notepad there. Blocked messages go into a Blocked folder. Groupshield
i
, 2001 11:40 AM
To: Powell, Ken
Subject: RE: today's admin backwards virus
Ken,
We use Groupshield here as well, and we do have it quarantining those
messages that contain virus-infected attachments. I was not aware of any
ability to actually block attachment types through Groupshield,
In 'real life' I'm not an system administrator
--
Martin Tuip
MVP Exchange
Exchange2000 List owner
www.exchange-mail.org
--
- Original Message -
From: "Jennifer Baker" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent
Um, no I didn't, Jennifer did.
-Original Message-
From: Rocky Stefano [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 10:12 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
You just said in a previous message that you were up all nigh
.
> -Original Message-
> From: Avi Smith-Rapaport [SMTP:[EMAIL PROTECTED]]
> Sent: Wednesday, September 19, 2001 2:18 PM
> To: Exchange Discussions
> Subject: RE: today's admin backwards virus
>
> You have it set up to send all attatchments to administrator email box
and Information Services (OBIS)
Vancouver, Washington
[EMAIL PROTECTED]
Voice: (360) 397-6121 x4658
Fax:(360) 759-6001
-Original Message-
From: Schwartz, Jim [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 1:27 PM
To: Powell, Ken
Subject: RE: today's admin backwards
[EMAIL PROTECTED]]
> Sent: Wednesday, September 19, 2001 4:30 PM
> To: Exchange Discussions
> Subject: RE: today's admin backwards virus
>
> Why? I would think that you would want it to be scanned for known viruses
> in
> case it contained something that I had mi
what firewall do you use Les, I have a Pix and I would like to start
blocking the .eml files also.
-TOny
-Original Message-
From: Les Bessant [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 3:50 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
: Exchange Discussions
Subject: RE: today's admin backwards virus
what firewall do you use Les, I have a Pix and I would like to start
blocking the .eml files also.
-TOny
-Original Message-
From: Les Bessant [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 3:50 AM
To: Exc
x4658
Fax:(360) 759-6001
-Original Message-
From: Schwartz, Jim [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 1:40 PM
To: Powell, Ken
Subject: RE: today's admin backwards virus
I would double check that with NAI. I've asked for that to happen a number
of time
We use Sybari Antigen and love it
-Tony
-Original Message-
From: Matt Hoffman [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 8:59 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
So, does anyone have a strong opinion on what filtering softwa
Probably Raptor, as he cites their mailing list...
- Original Message -
From: "Anthony L. Sollars" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent: Wednesday, September 19, 2001 4:45 PM
Subject: RE: today's admin backwards vi
is handy fish filet
knife [6][7]
[6] Excellent for making Fish Tacos
[7] Now how much would you pay?
-Original Message-
From: missy koslosky [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 2:25 PM
To: Exchange Discussions
Subject: Re: today's admin backwards virus
Prob
Subject: RE: today's admin backwards virus
That is a side benefit, for sure. And that is exactly the sort of
information I was looking for. My intent here really is to gather as much
information as possible from people already using various products. We
could have really used that so
I think we'll need to keep a close eye on this one at Orlando...
-Original Message-
From: Doug Hampshire [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 6:05 PM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
I'm not so sure. He might
23:20
To: Exchange Discussions
Subject: Re: today's admin backwards virus
In 'real life' I'm not an system administrator
--
Martin Tuip
MVP Exchange
Exchange2000 List owner
www.exchange-mail.org
--
- Original Message --
> My users don't use OWA right now, that is something we are
> not even talking
> about until Exchange 2000
of all the feedback we've recieved during our recent exchange rollout the
most positive comments have been about owa.
> I have very strong feelings about admins that run servers and don'
> indeed, but the software vendors could do better. microsoft
> in particular should provide more efficient update processes and some
> decent security tools. maybe even software that's secure out of the box.
>
> dan
Too right! If ever there was a time for Service Pack 7 for NT 4.0, now
is i
: Randal, Phil [mailto:[EMAIL PROTECTED]]
Sent: 20 September 2001 15:20
To: Exchange Discussions
Subject: RE: today's admin backwards virus
> indeed, but the software vendors could do better. microsoft
> in particular should provide more efficient update processes and some
> decent
Not a chance I'd ever want my production servers to auto update anything. I
strictly want to test each patch before I apply it to any production server.
Phil
> How about asking for MSAutoUpdate.. Which will act like AV
> auto updates.
> (with more control on the configuration of course)
__
> Not a chance I'd ever want my production servers to auto
> update anything. I
> strictly want to test each patch before I apply it to any
> production server.
absolutely, but what would be nice is something like 'MS update server',
which automatically downloads ALL relevant security patches
ct: RE: today's admin backwards virus
>
>
>
> > Not a chance I'd ever want my production servers to auto
> > update anything. I
> > strictly want to test each patch before I apply it to any
> > production server.
>
> absolutely, but wha
om: Steve Hanna [mailto:[EMAIL PROTECTED]]
Sent: 20 September 2001 16:45
To: Exchange Discussions
Subject: RE: today's admin backwards virus
That being the case the receptionist could manage the servers. I myself am
waiting for the MS easybake oven.
--steve
> -Original Message-
&
ED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent: Thursday, September 20, 2001 9:08 AM
Subject: RE: today's admin backwards virus
> Don't worry you are not going to loose your job. But such tool will leed
to
> "structured" pratices manging ones
: Wednesday, September 19, 2001 9:45 PM
>To: Exchange Discussions
>Subject: RE: today's admin backwards virus
>
>
>what firewall do you use Les, I have a Pix and I would like to start
>blocking the .eml files also.
>
>-TOny
>
>-Original Message-
>From
>-Original Message-
>From: missy koslosky [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, September 19, 2001 10:25 PM
>To: Exchange Discussions
>Subject: Re: today's admin backwards virus
>
>
>Probably Raptor, as he cites their mailing list...
>- Origina
> >what firewall do you use Les, I have a Pix and I would like to start
> >blocking the .eml files also.
the pix won't block files by type, since it doesn't operate in the upper
layers of the OSI model.
it's simply a cut-through packet filter and NAT box, but quite a good one.
dan.
___
.uk - New, improved and with more bounce!
>-Original Message-
>From: Doug Hampshire [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, September 19, 2001 11:05 PM
>To: Exchange Discussions
>Subject: RE: today's admin backwards virus
>
>
>I'm not so sure. He mig
SonicWall will block if you have the antivirus option.
-Original Message-
From: Dustin Krysak [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 1:47 PM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
Anyone know if there is a way to block w
iview to the Mec and whatever else you
guys/gals may be interested in diddling with (1).
(1) fluke and flukenetworks products only.
-Original Message-
From: Andy David [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 4:50 AM
To: Exchange Discussions
Subject: RE: today&#x
Exchange Discussions
Subject: RE: today's admin backwards virus
We don't need no stinkin' patches!
Andy David
J Muller International
-Original Message-
From: Jennifer Baker [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 19, 2001 06:10 AM
To: Exchange Discussio
day, September 20, 2001 11:22 PM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
One thing to keep in mind is may be getting hit in between patches.
My advise would be to disable all IIS related services until you are
fully SP'd and patched up. Then reenable IIS and see
nt: Thursday, September 20, 2001 11:22 PM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
One thing to keep in mind is may be getting hit in between patches.
My advise would be to disable all IIS related services until you are
fully SP'd and patched up. Then reenable II
Oh Joy! Kinda gives you a warm fuzzy feeling inside, doesn't it?
T.
-Original Message-
From: Jennifer Baker [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 21, 2001 12:53 PM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
the server was disconnected.
-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jennifer Baker
Sent: Friday, September 21, 2001 11:53 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
the server was disconnected. Apparently there are five patches not included
in the security r
Why is your web page down ?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Martin Tuip
Sent: Wednesday, September 19, 2001 15:20
To: Exchange Discussions
Subject: Re: today's admin backwards virus
In 'real life' I'm not an
ay's admin backwards virus
Subject: RE: today's admin backwards virus
Why is your web page down ?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Martin Tuip
Sent: Wednesday, September 19, 2001 15:20
To: Exchange Discussions
Subject: Re: today
sation: today's admin backwards virus
Subject: RE: today's admin backwards virus
Why is your web page down ?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Martin Tuip
Sent: Wednesday, September 19, 2001 15:20
To: Exchange Discussions
S
D]]On Behalf Of Jennifer Baker
Sent: Friday, September 21, 2001 11:53 AM
To: Exchange Discussions
Subject: RE: today's admin backwards virus
the server was disconnected. Apparently there are five patches not included
in the security rollup. *&%$#!!
-Original Message-
From: Thomas Di
59 matches
Mail list logo
