Thanks for the idea but NO "active" virus software running on server.
The server is not generally accessed directly and as such is scanned daily
by F-Prot rather than having the active scanner getting in the mix.
As stated, the server has undergone little change for the couple of weeks
preceding this; having said that I HAVE been adding IP addresses to block
with SMTPRCV and additional strings in TRASHFINDER with that in mind I have
just removed the enter set of blocked IP addresses from SMTPRCV to see if
it was getting to be too much of a load on the receiver (also deselected
"Reverse DNS incoming IP Addresses").
This could be relevant as stopping and starting the SMTPRCV service frees
the memory consumed by the service and all seems to well for awhile - I'm
still watching closely.
Regards
Don
At 12:47 PM 12/17/03 -0500, you wrote:
Hello,
Do you have any virus software running?
I think I used to see this error with Norton
{symantec} virus software running on the machine.
I had to keep it from running in the background
and only run it on a manual demand basis.
Hope this helps.
-------
R. Hall
---------- Original Message ----------------------------------
From: "Don R. Hill" <[EMAIL PROTECTED]>
Reply-To: [email protected]
Date: Wed, 17 Dec 2003 10:09:10 -0700
>Good Day
>
>We have been running EMWAC for several years with Mike's SMTPRCV (thanks
>Mike) and Paul Sica's SCSMFILTER.
>We have had the latest version of SMTPRCV 0.48 installed for several months
>as well as AVP 1.01.
>We use an older version of Bind DNS 4.9.5
>All has been working AOK until Friday, Dec. 12 - since that afternoon the
>server (which has had no changes since mid November IE patches) has been
>exhibiting major memory leakage with SMTPRCV but is hard to pin
>down. Removed and Installed a fresh copy of SMTPRCV - no change - the
>problem appears to be getting worse (could it be something with Spamcop
>black list - our main one - bl.spamcop.net) all logs appear normal except
>in the Application Event Log POP3S errors would appear about the same time
>as the SMTPRCV memory usage was climbing often the first service to fail
>was the MacPrint services (since moved to another server and disabled) DNS
>fails with the error below and then without any log but visually confirmed
>the SCSMFILTER would fail. Often the server would continue to receive mail
>for some time after these services failed before the SMTPRCV service failed.
>
>MacPrint error - Event ID: 2009
>The Windows NT Print System is not responding
>
>POP3S errors - Event ID: 32
>Win32 API routine "Logon failure User not known" failed: 1723
>and
>Win32 API routine "Logon failure - Password may be wrong" failed: 1455
>
>Generally leading to DNS error - Event ID: 1
>savedata: malloc: Exec format error - ABORT
>
>Any thoughts would be much appreciated, thank you.
>Regards
>Don
>
> `
> (o o)
> oOO--(_)--OOo
>
> Don R. Hill
> Northern Lights College
> Computer Systems Support Analyst
> Regional Administration
> 11401 - 8 Street
> Dawson Creek, BC, Canada V1G 4G2
> [EMAIL PROTECTED] http://www.nlc.bc.ca
> Ph. (250) 784-7558 Fax: (250) 782-5233
>
>This is the discussion list for the IMS Free email server software.
> To unsubscribe send mailto:[EMAIL PROTECTED]
>
> Delivered by Rockliffe MailSite
> http://www.rockliffe.com/mailsite
> Rock Solid Software (tm)
>
>
This is the discussion list for the IMS Free email server software.
To unsubscribe send mailto:[EMAIL PROTECTED]
Delivered by Rockliffe MailSite
http://www.rockliffe.com/mailsite
Rock Solid Software (tm)
`
(o o)
oOO--(_)--OOo
Don R. Hill
Northern Lights College
Computer Systems Support Analyst
Regional Administration
11401 - 8 Street
Dawson Creek, BC, Canada V1G 4G2
[EMAIL PROTECTED] http://www.nlc.bc.ca
Ph. (250) 784-7558 Fax: (250) 782-5233
This is the discussion list for the IMS Free email server software.
To unsubscribe send mailto:[EMAIL PROTECTED]
Delivered by Rockliffe MailSite
http://www.rockliffe.com/mailsite
Rock Solid Software (tm)
