> In the last 10 days I´ve been experiencing an old problem: several
> times a day, my IMail gets extremely busy, SMTP does not respond
> to connections on port 25 (although the service is running) and
> the CPU usage is about 100%.
The big question is: What is taking up 100% CPU usage? If it's iwebmsg.exe, I'd say
the problem is with web messaging (a search, for example). If it is iexplore.exe, it
could be Internet Explorer.
Have you checked the logs at the time this starts, for any clues? Any specific user
doing the same thing before it hangs?
>My spool is a lot larger than usual (about 2000 files).
What is similar about those files? Do they all have the same message body ("You too
can get rich quick..."), indicating a spam attack or infinite loop or mailing list?
Are they all to/from the same user or domain? All about the same size?
>03:05 03:52 SMTP-(000000BC) processing D:\IMail\spool\Q65be150.SMP
>03:05 03:52 SMTP-(000000BC) Trying 200.43.16.11 PRIVMSG #rosario
>:15,15·14,14·00,12 gentes 14,14·15,15· (0)
That means it's trying to send a message to a domain name that begins with
"200.43.16.11..." Take a look at the spool file to see if it is addressed to
"<[EMAIL PROTECTED] PRIVMSG...>".
FYI, the "Snow White" virus has a bad habit of mucking up E-mail addresses and sending
to garbled domains, and could account for hundreds/thousands of E-mails in the spool
file.
> This inexistant domain is (obviously) also listed this Q-file, and the
> sender mail is null (<>). But the correspondant D-file contains the
> Worm.Hybris sent to a user in my domain, but with another return
> address ([EMAIL PROTECTED]). Can anyone explain this discrepancy?
Bingo. I was right. See above for the reason. It's not your fault.
You might want to start running virus scanning software (or upgrade it to the latest
definitions, if you are running one).
--
-Scott
Declude: Anti-virus and Anti-spam solutions for IMail. http://www.declude.com
--
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
