RE: strange process running on one of my servers

  • From: "John Oligario" <joligario@xxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 21 Jul 2004 18:06:13 -0400

personally, i think you have some type of trojan

  _____  

From: Naboth Semwayo [mailto:naboths@xxxxxxxxxxxxxxxx] 
Sent: Wednesday, July 21, 2004 5:58 PM
To: [ExchangeList]
Subject: [exchangelist] strange process running on one of my servers


http://www.MSExchange.org/

Hi
 
Hope you can assist I have a process called e.exe running on my exchange
server. Now that wasnt there before. Anyone got a clue as to what it might
be??
 
 

-----Original Message-----
From: Chris Wall [mailto:Chris.Wall@xxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, July 21, 2004 10:06 PM
To: [ExchangeList]
Subject: [exchangelist] RE: RES: RE: Multiple SMTP relay servers - Pos sible
Solution?


http://www.MSExchange.org/

I plan on using one of the GFI relay servers as a primary (all services
running such as whitelisting, Bayesian, DNS Lookup, Virus Scanning, Keyword
and Attachment blocks, etc...) the other server will only be configured to
use keyword blocks, attachment blocks and virus scanning.  This is only for
failover purposes so the secondary does not have to be as restrictive.  I
look at it this way - it is better to have too much e-mail coming into the
organization than none at all, as long as it is being scanned for virus',
attachment types and some keywords.  
 
So far, for my overall solution I have this:
 
Set the internal Exchange servers (with IMS running) to use internal DNS to
deliver mail to the weighted MX records pointing to GFI SMTP Virtual Servers
in the DMZ.  Then the GFI SMTP Virtual Servers will reference external DNS
for final external mail delivery....
 
Now I have to find a way for internal mail to have redundancy.  Using IIS 6
or 5 on the SMTP Virtual Servers in the DMZ, I need to find a way to have
them deliver to either of the internal Exchange servers in case the primary
IMS is not available on one of the Exchange servers.  I have received
several responses telling me to have the SMTP Virtual Servers deliver mail
using DNS.  I can not do this as the SMTP Virtual Servers are pointing to an
external DNS server.  Can I set Smart Hosts on the SMTP Virtual Servers to
send mail to two IP address in IIS?  If not, I have a single point of
failure for mail coming into my organization if the Smart Host fails...
 
If I can specify two IP's in the IIS Smart Host field for my domain (for
example [172.16.1.1; 172.16.1.2] )  would this work?  Or is this not
possible in IIS?
 
Very confused now and I cant find anything that states I can set 2 IP's in
the IIS Smart Host field.

  _____  

From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Wednesday, July 21, 2004 3:47 PM
To: [ExchangeList]
Subject: [exchangelist] RE: RES: RE: Multiple SMTP relay servers


http://www.MSExchange.org/

Hi Tiago,
 
Good point! One location I worked with had 4 relays! One for MailEssentials,
one for MailSecurity, One for iHateSpam and one for SpamAssisin. All inbound
mail was run through all four relays before hitting the corporate Exchange
Servers. Turned out to work pretty good and very few false positives and
very little spam got it.
 
I'll need to write up the configuration some day at www.msexchange.org.
 
Thanks!
Tom
 <http://www.isaserver.org/shinder> www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
 <http://tinyurl.com/3xqb7> http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

-----Original Message-----
From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] 
Sent: Wednesday, July 21, 2004 1:23 PM
To: [ExchangeList]
Subject: [exchangelist] RES: RE: Multiple SMTP relay servers


http://www.MSExchange.org/


Also, be careful that if both relays run GFI MailEssentials, your spam
database on the SMTP gateways won't be the same (mail that is whitelisted on
one server may be considered spam on another).

 

Tiago de Aviz

SoftSell

(41) 340-2363

www.softsell.com.br <http://www.softsell.com.br/> 

 

Esta mensagem, incluindo seus anexos, tem caráter confidencial e seu
conteúdo é restrito ao destinatário da mensagem. Caso você tenha recebido
esta mensagem por engano, queira por favor retorná-la ao destinatário e
apagá-la de seus arquivos. Qualquer uso não autorizado, replicação ou
disseminação desta mensagem ou parte dela é expressamente proibido. A
SoftSell não é responsável pelo conteúdo ou a veracidade desta informação.


  _____  


 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
Chris.Wall@xxxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
naboths@xxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
joligario@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist 

Other related posts: