GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » Folders moving ON THEIR OWN -HELP!
Folders moving ON THEIR OWN -HELP! [message #145936] Tue, 11 June 2019 23:42 Go to next message
McIrish is currently offline  McIrish
Messages: 254
Registered: October 2011
KC 9.2.7 patch 3 (4225)
Everything has been running fine. Server has not had to restart in over 60 days for any updates. I get a call from someone telling me their mail folders in Outlook are in the wrong place. I take a look at his computer and sure enough, all his mail folders he created are moving on their own to other locations. Seems like a virus, but Sophos running on the server does not show anything. I take a look in the KC logs and in the Operations log, it is filled with MOVE operations for all the 425 users of the domain.
Extremely bad. Any ideas? I will get a case opened
Re: Folders moving ON THEIR OWN -HELP! [message #145940 is a reply to message #145936] Wed, 12 June 2019 15:36 Go to previous messageGo to next message
Maerad is currently offline  Maerad
Messages: 275
Registered: August 2013
First of all - you don't run antivirus on a mailserver if it's not backed / linked to the mailserver itself. Aside from reducing the overall performance, it also deletes mails with virus in it... you know what happens if some program deletes a mail in the kerio folder and it's not tru kerio itself, so the program doesn't know about it? Really bad idea.

Antivirus should be enabled in the mailserver itself and the client, best with a outlook addin or something like that.

For you problem - the "move" msgs are normal, nothing to worry about. Question is, do the folders for ALL users move? HOW are they moved? New folders? Randomly going from subfolder to the above one? New names?
Enable the debug log!
Also check if there is any auth from external sources and not the internal network, at least for those ppl that connect from the local network.
Re: Folders moving ON THEIR OWN -HELP! [message #145941 is a reply to message #145940] Wed, 12 June 2019 16:16 Go to previous messageGo to next message
McIrish is currently offline  McIrish
Messages: 254
Registered: October 2011
The antivirus software on the mail server was set to NOT scan within the mail store. So, I don't think that was the issue at all. We do have antivirus running inside KC. We are licensed on that. All clients also have AV. I don't think antivirus was the cause of this headache, but thanks for the advice. It's always good to double check.

After hours of help from support, we narrowed down the major issue to one user. I still have no idea why his mail folders got messed up. Folders were moved inside other folders, etc. The end user claims he did not do that. The massive amount of Move messages in the operations log was due to some other people doing massive amounts of moves, that I was unaware of. This was beyond the normal Move messages I always see in the Operations log. After the initial complaints from the first user, I kind of panicked when I saw all the extra Moves in the logs. I did find a number of mailboxes that had some index corruption but I got that all solved. This morning, everything seems to be normal.Totally odd. I'm hoping it was just user error.
Re: Folders moving ON THEIR OWN -HELP! [message #145951 is a reply to message #145941] Thu, 13 June 2019 16:13 Go to previous messageGo to next message
Maerad is currently offline  Maerad
Messages: 275
Registered: August 2013
McIrish wrote on Wed, 12 June 2019 16:16
The antivirus software on the mail server was set to NOT scan within the mail store.
Thing is, you don't need a virus scanner on the server, if nobody is working there. Maybe for a files share, but even here the client would be enough to scan. Even if you take out the folder itself from scanning, the data etc. is used in memory and I had my fair share of problems, even if the server itself was excluded. It's really not worth the hassle AND a slow down for the server. I only run a virus scan on our terminal servers - there I really need it.

Quote:
This morning, everything seems to be normal.Totally odd. I'm hoping it was just user error.
Yeah, I also believed it's a layer 8 > user problem. It mostly is in those cases. But you said others had those problems (moves) too, so I wasn't sure Smile
If you use outlook, deploy an addin for all users, called CodeTwo Move&Delete Watchdog. It's free, even for companies.

If you move or delete a folder, a msg will poppup and warn you, so the users will stop and think again.

It was like magic. Suddenly, all the problems with the public folders being moved or deleted disappeared. Who would've thought ....
Re: Folders moving ON THEIR OWN -HELP! [message #145959 is a reply to message #145951] Thu, 13 June 2019 22:41 Go to previous message
McIrish is currently offline  McIrish
Messages: 254
Registered: October 2011
Thanks for the help. I did remove the AV from the mail server. Mail is still being scanned by KC/Bitdefender.
I will look into that software. That might avoid these issue in the future. I appreciate the help.
Previous Topic: Filter Autoreply Signature Setting
Next Topic: nested groups
Goto Forum:
  


Current Time: Mon Mar 20 17:24:28 CET 2023

Total time taken to generate the page: 0.02395 seconds