Uploads almost equal to downloads

[latdyn]

Hi

I have just implemented a new site with ADSL. Originally I had a massive problem with trojan viruses and experience 700mb/800mb upload/downloads a day until I had removed all the viruses. Now that there are all clean. I still have a problem on the Windows 2003 server doing approx 40/50 upload downloads every 12 hour shift. I have switched all the desktops off at night so it is not the desktops. I have confirmed the port address is ours so no-one else is using our logon. I have scanned the server with Trend, Windows Defense and a few other tools that escape me now and no sign of any viruses, spyware, adware etc.

The next thing is to place a packet analyser on the server and monitor the ethernet port. Is there someting I'm missing here?

Thanks

 

[AdLo]

You have Windows 2003 Service Pack 1 and the latest windows 2003 updates installed?

 

[latdyn]

Yes SP1 installed and all updates applied

 

[bwana]

Have you changed your router and ADSL account passwords?

 

[latdyn]

Hi bwana v.8

Yes changed the username and password on installation. I think IC suggestion of placing IPcop in front of the server is a good option and in pure desperation it looks like that may be the way to go to get to the bottom of this.

Thanks Guys

 

[The_Unbeliever]

You can also try Smoothwall with the Bandview mod, so that you will be able to see bandwidth usage per workstation, and also per network card. (I have installed this mod on my ADSL smoothie to monitor the bandwidth usage of my users, and it works just great... caught out one heavy user immediately... )

IPCop is a fork of Smoothwall, both will do the same thing, protecting your Windows server from viruses, trojans and hackers.

Luckily you won't need a fancy super-fast PC to get IPCop or Smoothwall up and running, a plain Pentium2 with 64Mb RAM and 1Gb HDD will suffice. You can, after the initial installation, remove the monitor and keyboard as Smoothwall/IPCop can be administrated via web browser.

All my smoothies are running headless anyway. (sounds funny doesn't it?)

You will, however, need two network cards (one for the RED/outside segment, and the other for the GREEN/internal segment) and do remember to RTFM before installation! Also, you will need to open port 25 for successful SMTP communications through the firewall.

Do remember that USB, at this stage, is a 50/50 chance with any Linux installation, I do prefer in connecting the DSL router via a network cable to the firewall. Much simpler and easier to setup anyways.

Good luck!