McAfee AntiVirus prevents some DNS communications...
hi all;
in of dns servers have directory service role, have installed mcafee antivius 8.5 latest patch , latest engine. in of them, mcafee blocks dns communications. want know this communication , blocking these communications affect work of dns functionality?
following log appears time time in mcafee access protection log:
9/21/2009 6:28:16 am blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6668
9/21/2009 2:12:21 pm blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6667
9/21/2009 2:27:55 pm blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6668
9/21/2009 3:07:26 pm blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6666
9/22/2009 8:46:56 am blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6666
192.168.0.4 isa server address. gateway address on dns servers 192.168.0.11, dns tries communicate directly 192.168.0.4 using "irc comminucation" can see in above log!
dns servers windows server 2003 sp2.
idea?
-reza
in of dns servers have directory service role, have installed mcafee antivius 8.5 latest patch , latest engine. in of them, mcafee blocks dns communications. want know this communication , blocking these communications affect work of dns functionality?
following log appears time time in mcafee access protection log:
9/21/2009 6:28:16 am blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6668
9/21/2009 2:12:21 pm blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6667
9/21/2009 2:27:55 pm blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6668
9/21/2009 3:07:26 pm blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6666
9/22/2009 8:46:56 am blocked port blocking rule c:\windows\system32\dns.exe anti-virus standard protection:prevent irc communication 192.168.0.4:6666
192.168.0.4 isa server address. gateway address on dns servers 192.168.0.11, dns tries communicate directly 192.168.0.4 using "irc comminucation" can see in above log!
dns servers windows server 2003 sp2.
idea?
-reza
hi imprise,
i can safely ignore log, because mcafee doing job scanning required files during communication important
so might see many other exe's / system dll's getting scanned mcafee work. can ignore above 1 monitoring these logs important.
sainath !analyze
i can safely ignore log, because mcafee doing job scanning required files during communication important
so might see many other exe's / system dll's getting scanned mcafee work. can ignore above 1 monitoring these logs important.
sainath !analyze
Windows Server > Network Infrastructure Servers
Comments
Post a Comment