I’d turn on verbose logging in imail and declude. In the Declude log file something did not go quite right at 17:14:34:513.

It looks like Imail is functioning ok but declude miss handled the email\attachment in question.

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
Sent: Monday, January 23, 2006 4:30 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Left over D*.SM$ files in proc\work

 

OK it finally happened. I got another leftover D*.SM$ file in the proc\work directory while I was running the logs on debug. Any thoughts?

 

I think the following is the important part from various log files. I can post the whole thing if this is not enough.

 

DECLUDE.LOG

.

.

.

01/23/2006 17:14:34.497 q552537e400a4261c.smd Msg failed WEIGHT10 (Weight of 65 reaches or exceeds the limit of 10.). Action="">

01/23/2006 17:14:34.497 q552537e400a4261c.smd Turning spam into an attachment

01/23/2006 17:14:34.513 q552537e400a4261c.smd Wrote 2025 bytes of attachment header

01/23/2006 17:14:34.513 q552537e400a4261c.smd Wrote 3142 (3142)bytes of attachment header

01/23/2006 17:14:34.513 q552537e400a4261c.smd Set process priority back to 38273056.

01/23/2006 17:14:34.513 q552537e400a4261c.smd Couldn't move/copy ATTACH data file [183]

 

.

.

.

01/23/2006 17:14:34.935 q552537e400a4261c.smd MoveFile in AlterMessage - datafile = [D:\spool\proc\work\D552537e400a4261c.smd] TempFile = [D:\spool\proc\work\D552537e400a4261c.sm$]

01/23/2006 17:19:40.456 q552537e400a4261c.smd Couldn't rename SMD to SM$ [183].  Priority back to 32. Error String: [Cannot create a file when that file already exists.] [D:\spool\proc\work\D552537e400a4261c.smd] [D:\spool\proc\work\D552537e400a4261c.sm$]

01/23/2006 17:19:40.456 q552537e400a4261c.smd Data File [D:\spool\proc\work\D552537e400a4261c.smd] deleted.

01/23/2006 17:19:40.456 q552537e400a4261c.smd Recipient File [D:\spool\proc\work\q552537e400a4261c.smd] deleted.

 

VIRUS.LOG

.

.

.

01/23/2006 17:19:40.456 q552537e400a4261c.smd Couldn't rename SMD to SM$ [183].  Priority back to 32. Error String: [Cannot create a file when that file already exists.] [D:\spool\proc\work\D552537e400a4261c.smd] [D:\spool\proc\work\D552537e400a4261c.sm$]

 

 

IMAIL.LOG

 

01:23 17:13 SMTPD(552537e400a4261c) [192.168.69.4] connect 85.182.54.161 port 1447

01:23 17:13 SMTPD(552537e400a4261c) [85.182.54.161] HELO e182054161.adsl.alicedsl.de

01:23 17:13 SMTPD(552537e400a4261c) [85.182.54.161] MAIL FROM: <[EMAIL PROTECTED]>

01:23 17:13 SMTPD(552537e400a4261c) [85.182.54.161] RCPT TO: <[EMAIL PROTECTED]>

01:23 17:14 SMTPD(552537e400a4261c) [85.182.54.161] RCPT TO: <[EMAIL PROTECTED]>

01:23 17:14 SMTPD(552537e400a4261c) [85.182.54.161] RCPT TO: <[EMAIL PROTECTED]>

01:23 17:14 SMTPD(552537e400a4261c) [85.182.54.161] RCPT TO: <[EMAIL PROTECTED]>

01:23 17:14 SMTPD(552537e400a4261c) [85.182.54.161] D:\spool\D552537e400a4261c.SMD 3142

 

 

 

 

Goran Jovanovic

Omega Network Solutions


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)
Sent: Saturday, January 21, 2006 2:10 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Left over D*.SM$ files in proc\work

 

How often is this happening?

 

Are you using Hijack?

 

Put both the Junkmail and Virus logs into Debug until a couple of these occur, then extract from the log files ALL lines pertaining to the files in question into one file in exact time sequence along with the log lines from Imail SMTP.

 

John T

eServices For You

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
Sent: Saturday, January 21, 2006 10:45 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Left over D*.SM$ files in proc\work

 

Hi,

 

I have noticed that I am getting left over D*.SM$ files in the proc\work directory. I am getting 2 to 4 of these per day on a volume of 15-20K messages a day.

 

Windows Server 2003

IMail 8.15 HF2

Declude 3.0.5.23

Sniffer, invURUBL, F-Prot, McAfee

No on access Virus Scanner

 

When I check the logs I find

 

In the DECLUDE Log

 

01/21/2006 06:56:32.233 q1ffa301900405c91.smd Couldn't move/copy ATTACH data file [183]

01/21/2006 07:01:37.778 q1ffa301900405c91.smd Couldn't rename SMD to SM$ [183].  Priority back to 32. Error String: [Cannot create a file when that file already exists.] [D:\spool\proc\work\D1ffa301900405c91.smd] [D:\spool\proc\work\D1ffa301900405c91.sm$]

And in the Virus log

 

01/21/2006 07:01:37.778 q1ffa301900405c91.smd Couldn't rename SMD to SM$ [183].  Priority back to 32. Error String: [Cannot create a file when that file already exists.] [D:\spool\proc\work\D1ffa301900405c91.smd] [D:\spool\proc\work\D1ffa301900405c91.sm$]

 

Other times I will only find this message in the DECLUDE.LOG file.

 

01/15/2006 19:21:39.160 qe70539e800a6f12a.smd Couldn't move/copy ATTACH data file [32]

 

Anyone have any ideas about this?

 

Thanks

 

Goran Jovanovic

Omega Network Solutions

Reply via email to