Re: [Declude.JunkMail] Possible imail\declude issue

[Matt]

Harry, Essentially this means that the session was interrupted by something, and this could be a number of different things.  If this happens continually with the same host, I would look primarily for issues with connectivity between your servers, or some sort of issue with their server.  I suggested earlier that you try tracerouting to their IP from your server during a time when it appears that the E-mail isn't being delivered successfully.  Since you have said that this was isolated to this one host, this would be the most logical first step.  If you have access to the sending server's SMTP logs, then looking there would be a good second step. Matt Harry Vanderzand wrote: sorry I mistyped my last reply.   an entry in the log is missing as per the example below   Does that indicate the sender aborted the submission of the mail or what.  I am trying to figure out why that happens   It is like it is nor getting spooled or queued.   What can cause this   thanks Harry Vanderzand inTown Internet & Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Tuesday, May 17, 2005 1:05 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Possible imail\declude issue Harry, The only thing that I know of that could delete a log in a normal setup would be manually configuring IMail's built in ISplCln.exe.     http://support.ipswitch.com/kb/IM-19990629-DM06.htm Andrew posted some comments just a few days ago about a bug in an older versions of this:     http://www.mail-archive.com/declude.junkmail@declude.com/msg22444.html If you don't have this scheduled to run, then it isn't the issue. Matt Harry Vanderzand wrote: 216.16.233.16 is a web site sending out orders to the mail server.  There was a period of a day and a half when these orders were not received.  In checking the log I found that there was a missing log.  Any idea what may have caused it?   Normally it all works fine   Yes, John is right in correcting me.  This would seem to indicate that the message wasn't fully received.  Try tracerouting to 216.16.233.16 in order to see if something is dropping packets.  It should automatically resend after a period of time if this is a normal mail server. Matt John Tolmachoff (Lists) wrote: Incorrect. The missing line of the SMTPD log is a missing line, meaning either something interrupted the session or the lines are missing. Declude knows nothing of the message until after Imail SMTP service has received it in its entirety.   John T eServices For You   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Monday, May 16, 2005 1:17 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Possible imail\declude issue   Harry, That's what happens when Declude blocks an E-mail with an action like HOLD or DELETE, or it gets blocked or deleted in Declude Virus.  You need to check your JunkMail and Virus logs to determine what happened. Matt Harry Vanderzand wrote: I have a complaint from a clinet of missing e-mails that have a record in his database but the e-mail was never received.   Upon checking the logs I find entries as follows:   05:16 15:52 SMTPD(018600DC) [216.16.233.16] MAIL FROM: [EMAIL PROTECTED] 05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED] 05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED]   When they should look like:   05:16 15:52 SMTPD(018600DC) [216.16.233.16] MAIL FROM: [EMAIL PROTECTED] 05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED] 05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED] 05:16 15:52 SMTPD(018600DC) [216.16.233.16] D:\IMail\spool\Df9e2018600dcce43.SMD 1604   The spool line is missing   I cannot find any other clues as too what is happening here.   Anybody have any ideas?   We run i-mail 8.05, imail v1.82 and sniffer     Harry Vanderzand inTown Internet & Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222       -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott Fisher Sent: Sunday, May 15, 2005 11:30 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] German political spam   I cloned the subject lines and added them in this format to help combat the bounces: BODY 150 CONTAINS SUBJECT: (marcus's subjects)   ----- Original Message ----- From: "Markus Gufler" <[EMAIL PROTECTED]> To: <Declude.JunkMail@declude.com> Sent: Sunday, May 15, 2005 11:41 AM Subject: RE: [Declude.JunkMail] German political spam         Ok, I've added all subject line patterns (my, Marc's Nicks and both Spamassassin cf-files) to one declude filter file.   Please note that I've commented out "h eise.de" and "s        piegel.de" body     filter files and also that I usa a weight of 200.   Markus         --- This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail".  The archives can be found at http://www.mail-archive.com.           --- This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail".  The archives can be found at http://www.mail-archive.com.       -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================