Right Fax server issue

[Migration User]

Hi all,

Here i facing new kind of issue. we using SEP MR5 version on FAX server, only AV components actives on same machine. but right FAX vendor said their application services hung survival time, due to antivirus. 

1. he said it has been verified that notes.ini is updated with additional parameter (EXTMGR_ADDINS=notespw.dll) by anti virus software installed on RightFax System
2. (EXTMGR_ADDINS=notespw.dll) is automatically updated by Antivirus Softwarehe .

Thier report he mention below point

 

RightFax [ 8.5 8.7 9.0 9.3 9.4 ]

Antivirus software modifies the standard notespw.dll entry in the notes.ini from: ADDINS=notespw.dll 

 

to EXTMGR_ADDINS=notespw.dll The RightFax Lotus Notes Gateway uses the notes.ini on the RightFax server to make an API call. With the standard notespw.dll entry modified, we can no longer properly make the API call thus causing the gateway to stay in a 'starting' state.

To resolve this first you must stop the Lotus Notes Gateway.

Windows 2003

1. Open a command prompt

2. Go to the RightFax\Gateway directory

3. Type the following command: taskkill /F /IM notesgateway.exe [ENTER]

Windows 2000\NT

1. Open a command prompt

2. Go to the RightFax\Production\Bin directory

3. Type the following command: kill -f notesgateway [ENTER]

**IMPORTANT** This works best physically at the server. If you do not get a message that the gateway was successfully killed, go to the s! erver and type the same command while at the console.

There are two ways you can modify the notes.ini:

1. Open the notes.ini on the RightFax server

2. REM out the EXTMGR_ADDINS=notespw.dll entry (place a semi-colon in front of the entry)

3. Insert the standard ADDINS=notespw.dll entry just above the ;EXTMGR_ADDINS=notespw.dll

4. Open the Notes client to verify functionality 5. Close the Notes client

6. Start the gateway

Conversely, in step 2, simply delete the EXTMGR_ that Antivirus adds and continue to step 4.

All inbound, outbound, and synchronization processes for the Lotus Notes Gateway should be fully functional now. For further information about the EXTMGR_ entry please contact Antivirus Vendor.

 

 

Please suggest me any step for Solve  this issue from my side.

 

[pete]

check if by excluding the scanning and removing email component helps to fix the issue.

[Migration User]

THX for reaply.

i have exclude right fax folder from scanning. i found one error on event id which are i share with you please PM.

The RightFax Email Gateway Module service terminated unexpectedly. It has done this 1 time(s).

[Migration User]

So you mean that SEP modifies you a file notes.ini and adds EXTMGR_ to ADDINS=notespw.dll ?? Or just adds the whole line EXTMGR_ADDINS=notespw.dll ?? Domino support confirmed this is done directly by Antivirus (how could this be) or because of Antivirus, Domino adds it by itself?

[Migration User]

its not im said...That is vendor said . i want confrom from symantec this issue releted symantec or not.

[Migration User]

Well, I don't see how SEP could write someting like this into domino file. You can monitor access to this file by Process Monitor and see what it is modified by.

[Migration User]

grate idea ill check and conform .

[Migration User]

 

Hi,

I was excluding right fax folder and lotus folder from scanning. Again they are facing same issue.

But this time I was told him please update u r patches or services pack for same software.

Coz this issue not related Symantec. They agreed on that and star process of upgrade software 

Let’s see what happens on next. Ill updates you .

 

Thx for suggest.

[pete]

that the thing we need to have a check, as i have heard the SEP does not alter any file

[Migration User]

Revenge,

Thank you for the info. I suppose Lotus may update/change the file seeing SEP installed, but I am not very good at domino technology so it is just a guess. When you resolve the problem, please keep us updated :-)