RE: Email Issues

From: Shawn Jackson (sjackson_at_horizonusa.com)
Date: 02/27/04

  • Next message: Henry Brown: "Re: disallow freemail"
    Date: Thu, 26 Feb 2004 15:43:31 -0800
    To: <sean.osullivan@ise.ie>, <security-basics@securityfocus.com>
    
    

    >From: sean.osullivan@ise.ie [mailto:sean.osullivan@ise.ie]
    >Has anyone seen this or have any ideas on what its all about?

    Are you sure no one internally have the virus? If you AV sits between
    the Internet and your Groupware/email server and only scans SMTP the
    email could be internal. Also, it could have been stripped by another
    server. I would check the message headers to see if anyone's server left
    a X tag on it.

    You could open up the zip file on a Linux box and see what's in it,
    could have just been damage in transit.

    Shawn Jackson
    Systems Administrator
    Horizon USA
    1190 Trademark Dr #107
    Reno NV 89521

    www.horizonusa.com
    Email: sjackson@horizonusa.com
    Phone: (775) 858-2338
           (800) 325-1199 x338

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Henry Brown: "Re: disallow freemail"

    Relevant Pages

    • Re: Urgent! New router and big disaster
      ... The SBS DNS server, running on ... its IP it means that your problem is now DNS. ... forward ports to it reliably in the router. ... I should have been more clear about internet connection.. ...
      (microsoft.public.windows.server.sbs)
    • Re: RWW Disconnecting
      ... I have been connected from a remote site for about 3 ... DHCP server and even a wireless access ... the key codes to for Internet access. ... Client Workstations} ...
      (microsoft.public.windows.server.sbs)
    • Re: Default User folder temp IE files
      ... this weekend when server quiet. ... Only user with write perm on that folder structure is ... Forced a full virus scan for all workstations from AVG ... Files in the temp internet files inside it do not ...
      (microsoft.public.windows.server.sbs)
    • Re: Urgent! New router and big disaster
      ... I checked the binding order and the Server Local area connection is at the top. ... I should have been more clear about internet connection.. ... I wonder if I may have missed a firewall setting on the router as well. ...
      (microsoft.public.windows.server.sbs)
    • RPC termination problem
      ... It sounds like someone is exploiting the DCOM bug. ... because a virus didn't get found doesn't mean the bug ... First of all is this server ... Try turing on the internet firewall on the ...
      (microsoft.public.windows.server.general)