Our install of Junkmail Pro is also running as standard.  We've
rebooted several times and can't get it to restore to Pro.


Saturday, December 24, 2005, 10:36:37 PM, Darrell ([EMAIL PROTECTED]) <[EMAIL 
PROTECTED]> wrote:
Dsic> So here it is the night before Christmas and all though the house not a
Dsic> creature was stirring not even a mouse.
Dsic> My pager starts going off incenstantly - so I jump up to see what's the
Dsic> matter - oh my queues are filling up faster and faster...
Dsic> Sorry about that - maybe its the Christmas spirit that grabbed me...

Dsic> When I got into the server my proc folder was around 2500+ q*.smd files.
Dsic> Thank god for QueueMon :)

Dsic> At first I had no idea what was going on - my proc folder was growing and
Dsic> growing.  I checked the usual suspects (DNS, etc) and everything was 
working
Dsic> fine.  I started to sift through the logs and noticed a huge amount of
Dsic> messages that were failing a lot of tests and should have been held or
Dsic> deleted but were being marked with "LAST ACTION=IGNORE".

Dsic> I bumped up the log levels and started to see the following:

Dsic> Sorry, filters [REVERSEWEIGHTDNS] are only available in Declude JunkMail 
Pro
Dsic> Using [no] CFG file outgoing. Pro version required for outgoing mail.

Dsic> Not to mention I noticed messages being cleared very slowly.  After 
several
Dsic> restarts of the "Declude Proc" service things started to move again - I am
Dsic> not sure if it was because of the multiple Declude proc restarts or 
putting
Dsic> in the DNSOVERIDE command that we used back under 2.0.6 see - 
Dsic> http://www.mail-archive.com/[email protected]/msg24661.html

Dsic> After a couple of restarts of the decludeproc service and the DNSOVERIDE
Dsic> command my Declude started working again as a PRO version and messages
Dsic> started being blocked and processing very quickly.  My queues than cleared
Dsic> up.

Dsic> I am a bit sick to my stomach over this as I leaked to my customers 
probably
Dsic> 4-6K spam's over the entire 3 hour period from when this started to when 
it
Dsic> was finished.  I will have a bit of explaining to do I imagine on Tuesday 
if
Dsic> not sooner.

Dsic> Has anyone seen this?  Any explanations on what could have caused this.  I
Dsic> just keep thinking what if I did not have monitoring to catch this in 
time -
Dsic> I probably would not have checked the servers until Tuesday.  My only 
guess
Dsic> is that my server failed in the "phone home" license check and downgraded
Dsic> itself.

Dsic> Darrell
Dsic> ------------------------------------------------------------------------
Dsic> Check out http://www.invariantsystems.com for utilities for Declude And
Dsic> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, 
MRTG
Dsic> Integration, and Log Parsers. 

Dsic> ---
Dsic> [This E-mail was scanned for viruses by Declude EVA www.declude.com]

Dsic> ---
Dsic> This E-mail came from the Declude.JunkMail mailing list.  To
Dsic> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
Dsic> type "unsubscribe Declude.JunkMail".  The archives can be found
Dsic> at http://www.mail-archive.com.



----
Don Brown - Dallas, Texas USA     Internet Concepts, Inc.
[EMAIL PROTECTED]       http://www.inetconcepts.net
(972) 788-2364                    Fax: (972) 788-5049
----

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to