I just noticed that the other day there was a one hour (exact) outage on my server that seemingly related to Declude.
It seems that IMail called Declude which errored out in the Virus part, then an hour later the JunkMail log indicated that it was terminating and external program (possibly Sniffer or Size.vbs, or maybe F-Prot or AVG), then the SYSLOGD service started itself without indication that it was shut down.
That is unusual. If Declude errors out, a C:\Declude.gp1 and C:\Declude.gp2 file should be generated -- and the E-mail will normally be delivered an hour later.
However, the Declude Virus log file entry here indicates a crash within one of the virus scanners (virus scanner 1). That won't affect Declude Virus; Declude Virus and IMail will continue normally.
My guess is that something unusual was happening during that hour that caused a resource problem, which in turn caused the AV program to crash.
There was a series of *.vir directories that corresponded to the time that this started...
This could happen with some versions of Declude Virus if the virus scanner reports an error.
... and it appears that the server wasn't accepting E-mail for this period of time as I typically receive reports of spam leakage when I accidentally reboot the server without first stopping the SMTP service, and this lasted an hour instead of just a few seconds.
That is very strange. Were there SMTPD entries in the IMail log file during this time? Nothing within Declude should prevent SMTP connections from working.
I'm a bit worried that something might be set to time out after only an hour has passed. Could you shed any light on this?
----- JunkMail Log -----
05/28/2004 03:07:37 Qd72121bf01b645f4 ERROR: External program didn't finish after 1 hour; terminating.
This is the only sign of a problem. The external program didn't finish, which by itself shouldn't cause any problems -- but it may be that it was doing something unusual (such as a loop while using a high thread priority) that was interfering with SMTP connections until Declude JunkMail terminated the process. That's just a guess, though; it's very hard to say exactly what happened here.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
