RE: RBLs

2008-01-21 Thread William Lefkovics
That is a good example John. RBLs have grown up though. Some are pretty specific about what they block from geographic source to connection method (ie. dialup) and some are responsive to queries. I have used Spamhaus for years, and I have not had to deal with them either. -Original Message

RE: ActiveSync for Phones

2008-01-21 Thread Greg Olson
Fyi, Just a heads up to anyone else using these guys (http://www.certificatesforexchange.com/). The certs that they issue are NOT compatible with Windows Mobile 6 (at least Cingular 8125, 8550, tilt, and the 3125). There using an intermediate signing server (they sent the intermediate cert with the

RE: Snow Resort in Fort Worth, TX?

2008-01-21 Thread David Mazzaccaro
It's called Snowflex: http://en.wikipedia.org/wiki/Snowflex From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, January 18, 2008 7:03 PM To: MS-Exchange Admin Issues Subject: RE: Snow Resort in Fort Worth, TX? Where's the details on the

Re: Snow Resort in Fort Worth, TX?

2008-01-21 Thread Sherry Abercrombie
Snowflex it is. If you want to see it in action, watch this: http://www.youtube.com/watch?v=OKU_CBeWQyY On Jan 21, 2008 7:48 AM, David Mazzaccaro <[EMAIL PROTECTED]> wrote: > > > It's called Snowflex: > > http://en.wikipedia.org/wiki/Snowflex > > > > > -- > > *Fr

Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Clayton Doige
Dear all, I have a server apparently spewing out a hoarde of SMTP messages, at least according to the Message Tracking system, which indicates the emails originate from a specific email address. This is Exchange 2003 by the way: I have checked and the system is not a relay, and only authenticated

Re: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread James Rankin
If there is the possibility of a new or unrecognised virus on a machine, I generally use HijackThis to look for anything dodgy running - you can post the results of the scan if you're having trouble interpreting them On 21/01/2008, Clayton Doige <[EMAIL PROTECTED]> wrote: > > Dear all, I have a se

Re: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Candee Vaglica
Hi, Clayton. I second the Hijack this recommendation. Are you saying you swept the server or the user's workstation? I would pull the workstation off the LAN first thing. On Jan 21, 2008 10:03 AM, Clayton Doige <[EMAIL PROTECTED]> wrote: > Dear all, I have a server apparently spewing out a hoarde

Re: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Clayton Doige
We have swept everything on the LAN, nothing revealed from that. I have downloaded HiJakc This and am just running the thing now, and looking at the results. thanks :-) On 21/01/2008, Candee Vaglica <[EMAIL PROTECTED]> wrote: > > Hi, Clayton. > I second the Hijack this recommendation. > Are you

Re: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Clayton Doige
None of the processes, services, or registry entries that Hijack This outputs looks untowards on the server. Can the tool be used centrally to analyse numerous hosts, or does this need to be done on a host by host basis. Really what I want to do is see where these messages are originating as they

Re: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Candee Vaglica
My thinking is that the from is probably spoofed, so changing that user's password isn't going to accomplish anything. On Jan 21, 2008 10:36 AM, Clayton Doige <[EMAIL PROTECTED]> wrote: > None of the processes, services, or registry entries that Hijack This > outputs looks untowards on the server

RE: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Simon Butler
The first thing I would do is disable authenticated relaying. It may cause some problems for some users, but it needs to be done. Very unusual for a specific user account to be targeted, the usual target is the administrator account. Therefore what might be happening is that a user account is be

Re: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Candee Vaglica
Nice work. Thanks! On Jan 21, 2008 10:53 AM, Simon Butler <[EMAIL PROTECTED]> wrote: > > > The first thing I would do is disable authenticated relaying. > It may cause some problems for some users, but it needs to be done. > > Very unusual for a specific user account to be targeted, the usual targ

RE: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Campbell, Rob
They'll only be in sent items if Outlook was leveraged to send them. Most viruses come with their own smtp client. Sent from my GoodLink synchronized handheld (www.good.com) -Original Message- From: Simon Butler [mailto:[EMAIL PROTECTED] Sent: Monday, January 21, 2008 09:54 AM Cen

RE: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Ellis, John P.
I'd start by unplugging the Exchange server and see if the traffic stops. If if does you've isolated the problem If it does, then Id start unplugging sections of the network and see when it stops. A bit severe, but you will get an idea of where the problem lies. John

Re: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Candee Vaglica
I guess I might start by cranking up logging first. On Jan 21, 2008 11:11 AM, Ellis, John P. <[EMAIL PROTECTED]> wrote: > > > I'd start by unplugging the Exchange server and see if the traffic stops. If > if does you've isolated the problem If it does, then Id start unplugging > sections of the n

Re: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Clayton Doige
It is the admin account, there goes my attempt at being discreet lol, Found out that Exchange 2003 SP2 is not on here, so trying that, and have disabled authenticated relaying as per your suggestions. Thanks On 21/01/2008, Simon Butler <[EMAIL PROTECTED]> wrote: > > > > The first thing I would d

RE: "Error" when removing last Exchange 5.5 server

2008-01-21 Thread Palmer, Neal
I'm having a similar problem trying to remove an unused Exchange 2000 server after a migration to Clustered Exchange 2003. A MS solution was to use ADSI Edit to find the field that holds these mailboxes for each information store, and remove the non-standard ones. Unfortunately I there was nothing

RE: Anyone using CCR in production?

2008-01-21 Thread Barsodi.John
I'm looking at implementing CCR in a couple of my datacenters with SCR targets geographically. I don't have any first knowledge with our data yet, so I can't answer your specific size questions. I just know when I was going through my training last fall, that the instructors were very adamant abo

RE: Anyone using CCR in production?

2008-01-21 Thread Michael B. Smith
30K+ users, 2 GB hard limits, individual databases limited to 100 GB. Geodispersion is coming, using Windows Server 2008. Backup is LCR to cheap disk. I'm seeing more folks moving away from clustering with LCR and SCR. Good riddance, in my opinion. Regards, Michael B. Smith MCSE/Ex

Re: Anyone using CCR in production?

2008-01-21 Thread Don Ely
That's my intention as I prepare to move to 2007. I hate managing clusters... On Jan 21, 2008 8:30 AM, Michael B. Smith <[EMAIL PROTECTED]> wrote: > > > 30K+ users, 2 GB hard limits, individual databases limited to 100 GB. > > > > Geodispersion is coming, using Windows Server 2008. Backup is LC

RE: Anyone using CCR in production?

2008-01-21 Thread Michael B. Smith
The first two lines are about a particular client using CCR, sorry. The last line is a generic statement. I wasn't clear. Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com From: Barsodi.John [mailto:[EMAIL PROTECTED] Sent: Monday, January 21, 2008 11:35

RE: Anyone using CCR in production?

2008-01-21 Thread Barsodi.John
So you guys aren't using CCR or SCC Michael? From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Monday, January 21, 2008 8:30 AM To: MS-Exchange Admin Issues Subject: RE: Anyone using CCR in production? 30K+ users, 2 GB hard limits, individual databases limited to 100 GB. Geod

RE: Anyone using CCR in production?

2008-01-21 Thread Andy Shook
... = unless they involve Blackstone and TVK Shook http://www.linkedin.com/in/andyshook From: Don Ely [mailto:[EMAIL PROTECTED] Sent: Monday, January 21, 2008 11:33 AM To: MS-Exchange Admin Issues Subject: Re: Anyone using CCR in production? That's my

Re: problem with messagelabs

2008-01-21 Thread M Bruyere
Hi, Thanks for the comments. I just forwarded the messages as received from Messaglabs, i didn't think before sending, that the whole spam would be a problem, but you're right On Jan 18, 2008 11:37 AM, Jason Gurtz <[EMAIL PROTECTED]> wrote: > > I have a problem sending messages to a sit

RE: Anyone using CCR in production?

2008-01-21 Thread Kevin Miller
Yes. 30 100GB Not really works great Yes they are separated by 70 miles. I am using SCR to back it all up. From: Alex Fontana [mailto:[EMAIL PROTECTED] Sent: Sunday, January 20, 2008 10:46 PM To: MS-Exchange Admin Issues Subject: Anyone using CCR in production? Curious to know what folks have see

RE: Anyone using CCR in production?

2008-01-21 Thread Kevin Miller
I've done 2 projects recently where the customers had limited clustering experience but they'd been sold big SANs and "wanted to use them for SCC" apparently the SAN sales guys are way better than I am because both customers ended up with SCC in the end. From: Michael B. Smith [mailto:[EMAI

Re: Virus Hunt (PLEASE HELP!!!!!!!!)

2008-01-21 Thread Kurt Buff
I'll assume for the moment that you're NATing everything through a single IP address, but will make some suggestions if that isn't the case. A properly deployed NTOP is your friend in this case. It can be set (using the BPF filters) to monitor only port 25, and only outbound if you want, and you'l

RE: Anyone using CCR in production?

2008-01-21 Thread Brown, Larry
We implemented CCR in October of last year. We have about 2000 mailboxes, about 225 users per DB, max limit is 250MB per mailbox (98% of our users anyway), each DB ranging from 10 to 50 Gig in size...with the 50 Gig DB being the exception (don't ask). Most DB's are 10-20 Gig. Since our networ

Re: Anyone using CCR in production?

2008-01-21 Thread Kurt Buff
The CCR database isn't very large - They did, what, maybe 20 albums? Oh - you didn't mean the band, I guess. Never Mind! :) On Jan 20, 2008 10:46 PM, Alex Fontana <[EMAIL PROTECTED]> wrote: > Curious to know what folks have seen in the field when using CCR. How many > users, how large are yo

Re: Anyone using CCR in production?

2008-01-21 Thread Don Ely
Regarding issue #1, that sounds like a GC communication issue if restarting the SA fixes it... Regarding issue #2, that is not the same experience I have with my BES server and Exchange cluster... On Jan 21, 2008 2:14 PM, Brown, Larry <[EMAIL PROTECTED]> wrote: > > > We implemented CCR in Octob

Questions about RPC/HTTPS

2008-01-21 Thread Kurt Buff
I am setting this up, and am following the directions on Simon Butler's web page - http://amset.info/exchange/rpc-http.asp - and while I've read the Questions section at the end, I'm still a little unclear on this. 1) We're (at the moment) in situation 2 WRT DC and Exchange (DC and Exchange separa

Exchange 2007 Plain text message problem

2008-01-21 Thread Joseph L. Casale
I am being told that plain text messages being sent by ol2007 to a recipient have the body base64 encoded. Looking at http://technet.microsoft.com/en-us/library/bb232174.aspx it suggests that "When SMTP messages contain elements that are not plain US-ASCII text, the message must be encoded to p

Recreating Exchange 2003 Public Folder Store

2008-01-21 Thread Barsodi.John
I have an Exchange 2003 Server that has a public folder store on a partition that has gone AWOL. Whoever built this server years ago, created the partition in question as a dynamic partition and we lost a drive in the RAID set(Compaq hardware raid - blah to software RAID sets)... anyways when the

RE: Recreating Exchange 2003 Public Folder Store

2008-01-21 Thread Michael B. Smith
If everything has replicated, truly, then you won't lose anything. It will all backfill. Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com From: Barsodi.John [mailto:[EMAIL PROTECTED] Sent: Monday, January 21, 2008 8:03 PM To: MS-Exchange Admin Issues Subjec

RE: Questions about RPC/HTTPS

2008-01-21 Thread gsweers
1. Not sure about. But it looks like 2 is just missing the external from 1, which I have never put into any of my configs, some are split DNS others are not. Single servers running as both DC/Exchange and separate DC/Exchange. 2. Exactly. But RPC functionality must be installed on the DC you

Re: Exchange 2007 Plain text message problem

2008-01-21 Thread Alex Fontana
set-remotedomain -identity -linewrapsize On Jan 21, 2008 5:00 PM, Joseph L. Casale <[EMAIL PROTECTED]> wrote: > > > I am being told that plain text messages being sent by ol2007 to a > recipient have the body base64 encoded. Looking at > http://technet.microsoft.com/en-us/library/bb232174.aspx

RE: Exchange 2007 Plain text message problem

2008-01-21 Thread Joseph L. Casale
Nice, so do you know if that setting works for all child domains if I only set it at the TLD level? jlc From: Alex Fontana [mailto:[EMAIL PROTECTED] Sent: Monday, January 21, 2008 6:58 PM To: MS-Exchange Admin Issues Subject: Re: Exchange 2007 Plain text message problem set-remotedomain -identit

Re: Anyone using CCR in production?

2008-01-21 Thread Greg Mulholland
I was going too, but i thought, nah, i wont be that stupid! :) > The CCR database isn't very large - They did, what, maybe 20 albums? > > Oh - you didn't mean the band, I guess. > > Never Mind! > > :) > > On Jan 20, 2008 10:46 PM, Alex Fontana <[EMAIL PROTECTED]> wrote: >> Curious to know what f

Re: Exchange 2007 Plain text message problem

2008-01-21 Thread Alex Fontana
I think so, but not 100% sure. You can add one for *.domain.com as well, but that's a good question hopefully someone will chime in on. On Jan 21, 2008 6:36 PM, Joseph L. Casale <[EMAIL PROTECTED]> wrote: > > > Nice, so do you know if that setting works for all child domains if I > only set it