That is very strange. Were there SMTPD entries in the IMail log file during this time? Nothing within Declude should prevent SMTP connections from working.

I gave you the IMail log exactly as it showed before and after with no missing data. If you notice the time stamps, there was no activity in that log. The reboot caused the services to log that they were starting and I missed that before. It looks like serendipity that the server was coming back up exactly 1 hour after the error and that Declude logged that 1 hour message. Am I to assume that Declude keeps track of the time in hours and minutes and that's what caused this message to appear?

A Declude JunkMail process will stay active unless the external program has finish -- it will just sit quietly and wait for the external program to end. After an hour, it logs the error, and continues processing the E-mail.


If you note from the above times, Declude JunkMail logged that error as the server was coming back up from a power cycle.

Actually, it appears several minutes before the service starts again -- so it looks like it recorded that just before the reboot.


----- JunkMail Log -----
05/28/2004 03:07:37 Qd72121bf01b645f4 ERROR: External program didn't finish after 1 hour; terminating.
So is the likely explanation that F-Prot caused the crash/hang at 02:07:37 on 05/28/2004 (there were actually two log entries for Virus that showed this error at that time for different messages), or maybe another process on the server such as Web mail crashed/hung the server and the condition spilled over to cause issued with Declude Virus and hence the log entries?

That's my best guess.

I just wanted to make sure that I wasn't seeing a bug with interim software that might have been known and I didn't initially recall that I power cycled the server at that time due to it's condition. I was also worried that there was a 1 hour clock for time outs, but that seems like it was just a coincidence. Right?

It does seem like a coincidence -- I can't see any way that Declude could be causing a problem here, but it's something I'm going to make a mental note of in case anything else is reported. I'm also going to reduce the timeout for external programs to 5 minutes, as an hour does seem to be very long. It will also record the name of the external test that timed out, for cases where people have multiple external programs running.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to