When it starts to happen again, immediately clear the MS DNS Cache and watch
the overflow directory to see if it starts to clear.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Frederick Samarelli
> Sent: Monday, December 22, 2003 9:03 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] Overflow
> 
> John,
> 
> I have not tried to clear the MS DNS Cache.
> 
> But the problem goes away after a while.
> 
> It is fine at the moment but it will come back soon.
> 
> Fred
> ----- Original Message -----
> From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, December 22, 2003 11:43 AM
> Subject: RE: [Declude.JunkMail] Overflow
> 
> 
> Fredrick, please answer my question.
> 
> You said you are using the MS DNS service on the server to help with the
> problem.
> 
> Does it still reoccur, and if so, have you tried clearing the MS DNS
> service
> cache and does that allow mail to flow until it reoccurs?
> 
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
> 
> 
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Frederick Samarelli
> > Sent: Monday, December 22, 2003 8:36 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [Declude.JunkMail] Overflow
> >
> > I am 100% sure it is not DNS.
> >
> > I have Sniffer  and Spamchk as external test but I have commented them
> out
> > and still a problem.
> >
> > The problem goes way after a while then comes back.
> >
> > These are my external DNS test.
> >
> > BLITZEDALL ip4r opm.blitzed.org   *  3 0
> > CBL  ip4r cbl.abuseat.org   127.0.0.2 10 0
> > EASYNET-DNSBL ip4r sbl.spamhaus.org  127.0.0.2 16 0
> > IPWHOIS  ip4r ipwhois.rfc-ignorant.org *  5 0
> > SORBS-HTTP ip4r    dnsbl.sorbs.net      127.0.0.2 10 0
> > SORBS-SOCKS ip4r    dnsbl.sorbs.net      127.0.0.3 10 0
> > SORBS-MISC ip4r    dnsbl.sorbs.net      127.0.0.4 7 0
> > SORBS-SMTP ip4r    dnsbl.sorbs.net      127.0.0.5 7 0
> > SORBS-WEB ip4r    dnsbl.sorbs.net      127.0.0.7 7 0
> > FIVETEN-SPAMSUP ip4r blackholes.five-ten-sg.com 127.0.0.7 5 0
> > FIVETEN-MISC ip4r blackholes.five-ten-sg.com 127.0.0.9 10 0
> > FIVETEN-FREE ip4r blackholes.five-ten-sg.com 127.0.0.12 10 0
> > SECURITYSAGE   rhsbl   blackhole.securitysage.com  *  2  0
> > MAILPOLICE-BULK rhsbl   bulk.rhs.mailpolice.com      127.0.0.2    10
> 0
> > MAILPOLICE-PORN rhsbl   porn.rhs.mailpolice.com     127.0.0.2    10    0
> > ORDB  ip4r relays.ordb.org   *  5 0
> > SPAMCOP  ip4r bl.spamcop.net   127.0.0.2 17 0
> > SBBL  ip4r sbbl.they.com   *  3 0
> > NJABL  ip4r dnsbl.njabl.org   127.0.0.2 8 0
> > DSBL  ip4r list.dsbl.org   *  6 0
> > DSN  rhsbl dsn.rfc-ignorant.org  127.0.0.2 3 0
> > ----- Original Message -----
> > From: "R. Scott Perry" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Monday, December 22, 2003 11:00 AM
> > Subject: Re: [Declude.JunkMail] Overflow
> >
> >
> > >
> > > >The Declude process looks like it take 10 - 60 seconds per email.
> > > >
> > > >It is almost like it is in a wait state looking for something.
> > >
> > > There is about a 99% chance this *is* a DNS issue.
> > >
> > > If you are positive that your DNS server is working well (answering
> > cached
> > > queries very quickly, with no noticeable delay), the next thing to do
> is
> > > make sure that you are not running dead DNS-based spam tests (such as
> > > MONKEYS*, OS*, EASYNET*).  Depending on how well those tests died,
> they
> > may
> > > timeout, causing the behavior you are experiencing.
> > >
> > >                                                     -Scott
> > > ---
> > > Declude JunkMail: The advanced anti-spam solution for IMail
> mailservers.
> > > Declude Virus: Catches known viruses and is the leader in mailserver
> > > vulnerability detection.
> > > Find out what you've been missing: Ask about our free 30-day
> evaluation.
> > >
> > > ---
> > > [This E-mail was scanned for viruses by Declude Virus
> > (http://www.declude.com)]
> > >
> > > ---
> > > This E-mail came from the Declude.JunkMail mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.JunkMail".  The archives can be found
> > > at http://www.mail-archive.com.
> > >
> >
> > ---
> > [This E-mail was scanned for viruses by Declude Virus
> > (http://www.declude.com)]
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to