Hi all,

Using Imail 6.06 on Win NT4 sp6a and declude virus pro 1.61. SMTP logs to
the log server.

Normally the load on our mailserver is quite light - about 5000 mails per
day. Yesterday I was playing around with the server, trying to get Declude
Queue to kick in. I wrote a small script which sent 200 emails each time I
ran it. The emails was all addressed to "[EMAIL PROTECTED]", a free
account I created for the purpose. Anyway, during the evening I ran the
script five times plus som test runs that only sent a few mails.

By chance I ran the domlist.exe utillity from Declude today, and I noticed
that all the emails I sent yesterday wasn't mentioned in the report. After a
little investigation, I found out that Imail had only logged 248 deliveries.
Even though i deleted the emails as they arrived in the mailbox, I am 100%
sure that the account received at least 500 emails and more likely about
1000 emails.

find /C "rdeliver jubiimail.dk" log1203.txt returns 248.
find /C "RCPT TO: <[EMAIL PROTECTED]>" log1203.txt returns 394.
find /C "connect 192.168.0.11" log1203.txt returns 1083.

192.168.0.11 is the IP of my workstation. Normally the workstation never
connects directly to the server, but to an internal mailserver.

Digging deeper into the log, I found more SMTP conversations that seemed
incomplete. Example:

find "0635039C" log1203.txt returns the following lines:
20021203 120703 127.0.0.1       SMTPD (0635039C) [80.63.67.94] RCPT TO:
<[EMAIL PROTECTED]>
20021203 120703 127.0.0.1       SMTPD (0635039C) [80.63.67.94] ERR plot.dk
invalid user <[EMAIL PROTECTED]
20021203 120703 127.0.0.1       SMTPD (0635039C) [80.63.67.94] RCPT TO:
<pigen>
20021203 120703 127.0.0.1       SMTPD (0635039C) [80.63.67.94] ERR plot.dk
invalid user <pigen

That's all..... I'm convinced that there should be at least a "MAIL FROM"
line. Just to be sure that it wasn't an extremely slow SMTP conversation
from yesterday, I checked the log1202.txt logfile, but the ID is not
mentioned.

The mail above is sent at 12:07. This collides with a newsletter we send out
to about 2500 receipients every day at noon. 

Could it be that Imail, when under heavy load, stops logging? This would be
extremely bad, since the logfiles in theory could be used as evidence ect.

Anybody else experienced this?

/Rasmus


-------
[Denne E-mail blev scannet for virus af Declude Virus]
[This E-mail was scanned for viruses by Declude Virus]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to