6 Replies Latest reply: Mar 1, 2013 5:59 AM by Attila Polinger RSS

    Prevent mass mailing worms from sending mail

    Sohel Syed

      Hi All,

       

      Need expert advice on following issue, any help would be greatly appreciated.

       

      I am using a BI application on Windows Server 2003 which sends reports to end user on their email, I have McAfee installed on the same server. Since past few months I have observed that some times the end users are not getting emails. After investigating further I saw following event viewer warning messages at the same time when my BI application services were trying to send emails with multiple recepients.

       

      Source: McLogEvent
      EventID= 257
      Description: Would be blocked by access protection rule(rule is in warn-only mode) (Antivirus Maximum protection protected cached files from password and email address stealers.)

       

      Source: McLogEvent
      EventID= 258
      Description: Would be blocked by access protection rule(rule is in warn-only mode) (Antivirus Maximum protection prevent mass mailing warms from sending mail.)

       

      After discussing this with my security admin he reviewed the McAfee logs and informed me that McAfee is not blocking any emails and these are just warning messages and we can ignore these.

       

      Please let me know what does these warning messages mean?

       

      Thanks a lot for your help.

       

      Regards,

      Sohel