So here it is the night before Christmas and all though the house not a
creature was stirring not even a mouse.
My pager starts going off incenstantly - so I jump up to see what's the
matter - oh my queues are filling up faster and faster...
Sorry about that - maybe its the Christmas spirit that grabbed me...
When I got into the server my proc folder was around 2500+ q*.smd files.
Thank god for QueueMon :)
At first I had no idea what was going on - my proc folder was growing and
growing. I checked the usual suspects (DNS, etc) and everything was working
fine. I started to sift through the logs and noticed a huge amount of
messages that were failing a lot of tests and should have been held or
deleted but were being marked with "LAST ACTION=IGNORE".
I bumped up the log levels and started to see the following:
Sorry, filters [REVERSEWEIGHTDNS] are only available in Declude JunkMail Pro
Using [no] CFG file outgoing. Pro version required for outgoing mail.
Not to mention I noticed messages being cleared very slowly. After several
restarts of the "Declude Proc" service things started to move again - I am
not sure if it was because of the multiple Declude proc restarts or putting
in the DNSOVERIDE command that we used back under 2.0.6 see -
http://www.mail-archive.com/[email protected]/msg24661.html
After a couple of restarts of the decludeproc service and the DNSOVERIDE
command my Declude started working again as a PRO version and messages
started being blocked and processing very quickly. My queues than cleared
up.
I am a bit sick to my stomach over this as I leaked to my customers probably
4-6K spam's over the entire 3 hour period from when this started to when it
was finished. I will have a bit of explaining to do I imagine on Tuesday if
not sooner.
Has anyone seen this? Any explanations on what could have caused this. I
just keep thinking what if I did not have monitoring to catch this in time -
I probably would not have checked the servers until Tuesday. My only guess
is that my server failed in the "phone home" license check and downgraded
itself.
Darrell
------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And
Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG
Integration, and Log Parsers.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
