I manage two servers running Windows 2000 Server SP4. Both the servers
are email, web servers and database servers.
Email Server : Mdaemon
Web Server : IIS 5.0 
Database Server : MS SQL Server 7.0

The following questions relate to keeping the server secure. 

A) Anti-Virus : The server is a host to an engine that have to query
many web pages. So there is constant outbound activity with internet
explorer components being by the engine used to access the web pages.
Past experience shows us that we receive a lot of emails containing
viruses. Would like to know of an anti-virus solution that would be
able to keep the machine clean from virus threats through email and
internet access. I am looking for a single license edition capable of
running on Windows 2000. Most popular AV packages don?t seem to have
server versions. Interested in a license for an year or 15 months with
renewal options. Anti-spyware features would be an advantage

B) Intrusion Management : Have had rootkit hacks in the past that have
left me with no option but to reinstall the O/s. Also have a feeling
that malicious code is running on the machine and using the resource
to send out spam. However, I am neither able to detect effectively or
clean. At present doing a reinstall of an infected machine. I would
like what software and hardware options exist to be able to manage
intrusions and control malicious code implants. I would not be able to
afford costly hardware options. What basic configurations should be
done on the firewall to start with ?


Thanks, 
Narayanan

Hi Narayanan,

Thanks for your query.This is Razdan from Mcafee Security.Maybe I
would be able to help you in this regard.

Mail me at razdankhan@gmail.com

Regards,

Razdan Khan
Mcafee Security

Get hold of a copy linux of IDS with Antivirus , find a old machine
and put it infront of your server to guard and scan all traffic.
go to distrowatch.com for ideas.