New virus and post.office issues

["Dan Tappin" <dan.tappin@xxxxxxxxxxxxxxx>]

I seem to be having some serious network / virus / post.office issues the past 
few days.

I am the admin here at our PC based office (50 desktops) with a Linux 
fileserver and a G4 gateway server running PO, Apache, NAT
etc. sharing our DSL line.

Here are my signs and symptoms:

 - possible desktops infected with the Novarg virus
 - PO stops responding to connections after an undetermined time (connection 
lost and timeout errors)
 - mail is 'stuck' in Outlook and Apple mail clients
 - STMP-Accept processes are stacking up all the time
 - stopping and restarting PO seems to be one only way to fix it (temporarily)
 - attachments seem to aggravate the situation
 - CPU usage is being used steady (see following MRTG sites):

Primary Mail Server:

http://mrtg.orourke.ca/firewall/

Secondary Mail Server:

http://mrtg.wavefront.ca/freya/

I am running spamassassin and I have FirewalkX firewall on these systems.

This is ugly.  I am not sure where to start.  Can anyone recommend a better 
firewall solution?  I think this crap should be blocked
at the TCP/IP level and should never even see the mail server.

Is there a way to monitor the network and identify rouge systems that are 
infected?  I did track down one via the pologs (250+ lost
connections over the day).

Dan

---------
Tenon Intersystems' Post.Office Mailing List
To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
with the body only containing: 
unsubscribe
Find the searchable mailing list archives at:
http://postoffice.computeroil.com/