Re: Decommissioning a Domino Email Server

Attack from the outside? Remove the NAT rule on your firewall. Cut it off
from the outside world.

On Apr 27, 2016, at 3:14 PM, Gerald Kern <jp2558@xxxxxxxxx> wrote:

A few years ago we migrated off domino to exchange.

Today I was informed that the domino server is fighting off an exploit
defined as 'Bash Remote Code Injection (Shellshock) HTTP CGI (headers)
exploit HTTP'.

While we need to maintain the mail files for historical purposes, I do

want

to end the the domino tasks that this exploit may be targeting.

So my question is this:

Would ending the following tasks effectively decommission the email
functionality of the domino server?

HTTP & POP3 (via removal from the servertasks line in notes.ini)
SMTP (not sure how to end smtp since it's not in the servertasks - I know

I

can use navigator and change the tcp property there to set it to never
start)

The only users are H/R who need access to their mail files, and the IT

team

to access a handful of documentation databases.


--
Thanks, Jerry

Gerald Kern
I.T. Manager
The Toledo Clinic, Inc.
4235 Secor Road
Toledo, OH 43623
Phone 419-479-5535

Programming Supervisor
IBM Certified RPG IV Developer
Lotus Notes/Domino Administrator
--
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)

mailing list

To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.

Steve Pitcher
Enterprise Systems Manager

(Embedded image moved to file: pic12494.jpg)


Phone: 902-895-8430 x3104
Fax: 902-893-1136
Email: stevepitcher@xxxxxxxxxxxxx
Website: www.scotsburn.com

Scotsburn Ice Cream Co. 85 Blakeney Drive Truro, N.S. B2N 6W9
Canada