Yet again, I’ve run into a problem with the McAfee mini firewall component of the viruscan suite 8.0i. This time it has to do with email over SMTP. At my company we use I Hate Spam from sunbelt software as our SPAM filtering engine. We have a separate server running this IHS software as a gateway for incoming e-mail. Well, suddenly we started having problems receiving mail from IHS, it would queue at the IHS server, but would never get delivered to the exchange server. After a few days of diagnosis it was discovered that the McAfee mini-firewall was blocking the smtpsvc.exe and marking it as a worm. We had to add an exception for this service in McAfee to avoid having SMTP traffic stopped. This was a major pain and caused hours of downtime in my company for incoming e-mail. Makes me wish we were using Symantec rather than McAfee (which is my personal preference anyway).
I had a server a few weeks ago that suddenly started experiencing blue screens of death for no aparent reason. It tooks a week or troubleshooting and digging to finally determine from a crash dump file, that the cause of the issue was the mini firewall component of McAfee viruscan 8.0i. I was able to disable the component in the registry and havn’t had a problem since. This server was an Iomega NAS p435m. So FYI – if anyone has any similar unexplained problems, check the mini firewall in McAfee, as it may be the cause, although in our case it took a memory dump file analysis to find out the cause.