What happened this time is when my server was in the process of a shutdown, and the message that got through had the same exact time stamp on it as Event Viewer logged itself being stopped, and 4 seconds before the last IMail log entry. I'm assuming that as a part of shutdown, IMail must have executed some process that pushed this stuff out, or maybe it never got pushed to Declude and sat in the queue until after the server came back up, effectively bypassing Declude. This is a little worrisome considering that there were two other messages received in the few seconds after that one was passed, and I only get about 5,000 a day. I'm thinking that maybe this needs to be corrected in IMail similar to the queue processing behavior. While I'm still under the belief that the queue processing problem should only be seen about once a year on average, my server gets rebooted far more frequently than that. I wonder if shutting down IMail before a reboot would resolve this issue? A snippet of the log is below.
I'm also wondering if maybe I could set something fancy up with IMail rules to check for the Declude headers and reprocess the message if missing. I have a feeling that I would need to create a program alias to handle something like this, and then redirect it through something like MS SMTP with IPBYPASS on for both server addresses? Or maybe I could just call SMTP32.exe or Declude.exe directly from the program alias (which gets passed a file name of the received E-mail, though I don't know that it's ready to be sent in a single file format. Anyone have any thoughts on this? This would probably be a good tool for all IMail users regardless of the version so that such issues are stopped, and it would resolve the queue issue on v7 despite no patch being available.
Matt
20031220 044132 127.0.0.1 SMTPD (000A0016) [66.183.6.10] HELO d66-183-6-10.bchsia.telus.net <-- This is the one that got through if not others.
20031220 044133 127.0.0.1 SMTPD (000A0016) [66.183.6.10] MAIL FROM: <[EMAIL PROTECTED]>
20031220 044133 127.0.0.1 SMTPD (033B01CA) [67.161.143.190] HELO c-67-161-143-190.client.comcast.net
20031220 044133 127.0.0.1 SMTPD (033B01CA) [67.161.143.190] MAIL FROM: <[EMAIL PROTECTED]>
20031220 044133 127.0.0.1 SMTPD (000A0016) [66.183.6.10] RCPT TO: <[EMAIL PROTECTED]>
20031220 044134 127.0.0.1 SMTPD (033B01CA) [67.161.143.190] RCPT TO: <[EMAIL PROTECTED]>
20031220 044135 127.0.0.1 SMTP (3316) processing E:\spool\Q1936000600161a3b.SMD
20031220 044135 127.0.0.1 SMTP (3316) ldeliver ******.com bpettit-main (1) [EMAIL PROTECTED] 40545
20031220 044135 127.0.0.1 SMTP (3316) finished E:\spool\Q1936000600161a3b.SMD status=1
20031220 044135 127.0.0.1 SMTPD (033B01CA) [67.161.143.190] E:\spool\D194d033b01ca7490.SMD 1805
20031220 044136 127.0.0.1 SMTPD (000A0016) [66.183.6.10] E:\spool\D194d000a00167396.SMD 1577
20031220 044136 127.0.0.1 SMTPD (0002008C) [208.7.179.59] connect 204.127.131.126 port 63674
20031220 044136 127.0.0.1 SMTPD (0002008C) [204.127.131.126] EHLO mtiwgwc16.worldnet.att.net
20031220 044136 127.0.0.1 SMTPD (0002008C) [204.127.131.126] MAIL FROM:<[EMAIL PROTECTED]>
20031220 044136 127.0.0.1 SMTPD (0002008C) [204.127.131.126] RCPT TO:<[EMAIL PROTECTED]>
20031220 044137 127.0.0.1 SMTPD (0002008C) [204.127.131.126] E:\spool\D19500002008c81b0.SMD 3383
SYSLOGD 7.15, Copyright � 1994-2001, Ipswitch, Inc.
20031220 044427 0.0.0.0:514 Server ready for action
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
