Computer Help, Network Services and Technical Support

Problem:

The IIS, SMTP, POP3 and WWW services crash frequently on an Exchange Server
with Symantec Mail Security 5.x installed. They take Exchange 2003 (and
2000) services down. This happens with a frequency of once or twice an hour
- maybe more.

Windows System Log Event ID: 7031 and Event ID: 7034 are the symptoms.

Resolution:

This issue is caused due to the Symantec Brightmail 5. The recommended
workaround is to modify Brightmail to no longer use the rulesets that are
causing the issue.

To resolve this issue - modify the bmiconfig.xml file.

To modify bmiconfig.xml to work around the issue:

Open the services menu by going to Start -> Run and typing services.msc
Stop the Symantec Mail security for Microsoft exchange service, and the
Symantec Mail security spam statistics service, if they are started. Then:

Open :\Program
files\Symantec\SMSMSE\5.0\Server\SpamPrevention\bmiconfig.xml in a text
editor such as notepad

Go to the File menu, choose save as, and save the file as bmiconfig.old

Delete the following 5 strings: including the opening and closing HTML ruletype:
header_regex
body_regex
lang_header_regex
lang_body_regex
bodysig

Once those 5 lines of entries are deleted, go to the File menu, and choose save as,
save the file as bmiconfig.xml

Restart the Symantec mail security for Microsoft exchange service; it is not
necessary to restart the Spam statistics service

- An easier way is to save the bmiconfig.xml to your Desktop first. Edit it
as per the instructions above. THEN stop the Symantec Services, Rename the
bmiconfig.xml file and Copy the edited file back to it’s original folder.
THEN restart the Symantec AV Service(s).

Good Luck.

.