On Friday night, our mail server BSOD for the first time ever, and I believe it was because of BlackICE. BlackICE has been disabled since then, and the server has been stable.
Thanks! ----- Jay Sudowski // Handy Networks LLC Director of Technical Operations Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003 Hosting Solutions Tel: 877-70 HANDY x882 | Fax: 888-300-2FAX www.handynetworks.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski - Handy Networks, LLC Sent: Friday, November 19, 2004 1:41 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Blackice Hi John - It's a pretty regular Win 03' Std edition box, running iMail, DNS, Declude JunMail / AV, F-Prot, Sniffer, and now BlackIce. Upon further investigation, I'm thinking that this is a GUI issue because under the advanced firewall settings, I do see IPs getting blocked for the time period where it was showing 0.0.0.0 as the intruder IP. However ... I'm actually less astounded by this then I thought I'd be. A few weeks ago, an analysis on our log files revealed that we were getting approximately 100,000 ERR invalid user attempted deliveries a day; by offloading the domains getting hit the hardest to a IIS SMTP gateway box using ORF, we've got that down to 10-15K failed attempted deliveries a day. At this point, I have BlackIce blocking hosts if they make 3 SMTP errors in a 90 second period, and I'm only blocking about 30 hosts per hour. More concerning, is that my concurrent SMTP sessions are staying absurdly high - anywhere from 55 concurrent to over 80. My server only ldelivers 20,000 messages a day. This is so frustrating. -Jay -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of john cesta Sent: Friday, November 19, 2004 12:50 PM To: Jay Sudowski - Handy Networks, LLC Subject: RE: [IMail Forum] Blackice On Fri, 19 Nov 2004 10:37:40 -0700, Jay Sudowski - Handy Networks, LLC wrote: >�I'm not sure it's working flawlessly for me. �After a period of >�time, the application starts reporting the intruder address as >�0.0.0.0 and the count increment on that event goes up, and up, and >�up. �I'm not sure if this is simply a GUI bug or not. �It's bugging >�me regardless. I'm running on the web server 2003 edition. What other software do you have on your server? John > > >�-----Original Message----- >�From: [EMAIL PROTECTED] [mailto:IMail_Forum- >[EMAIL PROTECTED] On Behalf Of john cesta >�Sent: Friday, November 19, 2004 8:41 AM >�To: Cycle Rider >�Subject: RE: [IMail Forum] Blackice > > >�Yea, I've had blackice running on 2003 server for about 6 months. >�It's flawless. The folks at ICC (or whatever the company is) state >�that they don't support it yet but they have run it and it runs >�fine. 2003 is not on their supported list of OSs > >�John Cesta > >�On Thu, 18 Nov 2004 09:02:57 -0800 (PST), Cycle Rider wrote: > >>>�Note that BlackICE is not compatible with Windows >>> >>�2003 Server. >> >> >>�Sure it is. �I upgraded a mail server to windows 2003 �server >>�last week and blackice server edition is >>�working fine. �Why do you say it is not compatible? >> >> >>�__________________________________ >>�Do you Yahoo!? >>�The all-new My Yahoo! - Get yours free! >>�http://my.yahoo.com >> >> >>�To Unsubscribe: http://www.ipswitch.com/support/mailing- >>�lists.html �List Archive: http://www.mail- � >>�archive.com/imail_forum%40list.ipswitch.com/ >>�Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >> >�iMAIL Reporter - Reports on iMAIL server and POP users >�LogFileManager - IIS LogFile Management Tool WebPageChecker - Helps >�Maintain Server UpTime DomainReportIt PRO - Helps Rebuild IIS >�http://www.serverautomationtools.com > > >�To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >�List Archive: http://www.mail- >�archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: >�http://www.ipswitch.com/support/IMail/ > > >�To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >�List Archive: http://www.mail- >�archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: >�http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
