John, right now only Netshield 2000 SP1 is running, hasn't crashed yet but too early to tell.
No, we haven't run any performance monitors yet - but the common thing in the BSOD is 100+ emails being processed by Imail/Declude. This will generally happen during peak hrs, we can actually duplicate it by sending large amounts of mail to Imail for processing. We'll probably try to duplicate it during our maintenance window this weekend, if it happens again then it is most likely fprot. If not we'll need to dig a little deeper and maybe call MS. No other AV insgalled aside from Fprot (now disabled), Grisoft (also disabled) and Netshield (currently active). No AV is protecting the server itself, I know this is not a good idea... Peter ----- Original Message ----- From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, September 08, 2003 4:12 PM Subject: RE: [Declude.Virus] Blue Screen on Imail with Declude Virus and Declude Junkmail and Declude Junkmail So right now, you only have Gristoft running, correct? Exactly when did this start? Have you run any performance monitors to see what is happening just before the BSOD? Any other AV software installed? What AV is protecting the server itself? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Mailing Lists > Sent: Monday, September 08, 2003 12:54 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Blue Screen on Imail with Declude Virus and Declude > Junkmail and Declude Junkmail > > Windows version, > > Peter > > > ----- Original Message ----- > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, September 08, 2003 3:26 PM > Subject: RE: [Declude.Virus] Blue Screen on Imail with Declude Virus and > Declude Junkmail and Declude Junkmail > > > Are you using the DOS version or Windows version of F-Prot? > > John Tolmachoff MCSE CSSA > Engineer/Consultant > eServices For You > www.eservicesforyou.com > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of Mailing Lists > > Sent: Monday, September 08, 2003 10:43 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.Virus] Blue Screen on Imail with Declude Virus and > Declude > > Junkmail and Declude Junkmail > > > > Well, yes. We only used Fprot till Mimail came out. At that time it took > > Fprot 4 days to update their definitions. So many customers started > getting > > Mimail and complaining. To avoid the problem we decided to use multiple > > scanners to lower possibility of a virus slipping thru. > > > > However I don't think our issue is related to the # of scanners as this > > first started happening when we only had 1 scanner (fprot) > > > > Peter > > > > > > ----- Original Message ----- > > From: "Greg Foulks" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Monday, September 08, 2003 1:29 PM > > Subject: RE: [Declude.Virus] Blue Screen on Imail with Declude Virus and > > Declude Junkmail and Declude Junkmail > > > > > > > I hate to hijack the thread but... > > > > > > Why run so many scanners? We only run one scanner and have never had a > > > problem... Are we missing something by not running more than one? > > > > > > Greg > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry > > > Sent: Monday, September 08, 2003 1:16 PM > > > To: [EMAIL PROTECTED] > > > Subject: Re: [Declude.Virus] Blue Screen on Imail with Declude Virus and > > > Declude Junkmail and Declude Junkmail > > > > > > > > > > > > >hopefully someone can give us some insight to a problem related to BSOD > > we > > > >have been encountering on our Imail server > > > > > > I'm guessing that it is one of the 3 virus scanners. AV programs often > > > access memory and hard drives at a low level, and are a bit more prone > to > > > issues like this than most applications. > > > > > > What I would do is remove one at a time, to see if removing one of them > > > fixes the problem. > > > > > > -Scott > > > --- > > > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > > > Declude Virus: Catches known viruses and is the leader in mailserver > > > vulnerability detection. > > > Find out what you have been missing: Ask for a free 30-day evaluation. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > -------------------------------------------------------------------------- > > -- > > > -- > > > [This E-mail was scanned for viruses by Declude Virus Scanner on > > > mail.nfti.com] > > > > > > > > > > -------------------------------------------------------------------------- > > ---- > > > [This E-mail was scanned for viruses by Declude Virus Scanner on > > mail.nfti.com] > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
