* This is the modus mailing list *

You might note that PKWare ZIP and WinZip 9.x are not directly cross
compatible, so this may have something to do with it also.

Just my $0.02


Jim Barstow 
Sr. Network Engineer
Diversified Solutions and Services, Inc.
22645 Canal Road, Suite B
Orange Beach, AL 36561
251.980.8968


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Ken Grimes
Sent: Tuesday, November 11, 2003 2:30 PM
To: [EMAIL PROTECTED]
Subject: [Modus] Modus server not responding.


* This is the modus mailing list *

Lewis,

Sorry for the late response, we have been arguing with Disney and ABC
for the last hour over why they are rejecting some of our messages from
domains we host.  We clearly show in the log that they accepted the
message and then they turn around a send it back with a 550 5.7.1 error
saying something about header inconsistency.  We traced it back to them
using RDNS and found that our clients were using webmail and generating
a 127.0.0.1 in the header which their RDNS didn't like.  Anyways that is
a heads up ABC and Disney both enabled this feature this last week.

We currently have our virus scanner at 3000K but may move it to 300K if
it works well with your network.  I have also had some complaints of
.zip files being quarantined as corrupt attachments.  I figured these
were due to WinRAR users vs. WinZip but maybe this is also the problem.
If anyone else has anything to offer on this subject, it would be
greatly appreciated!!!

Thanks for the help Lewis,
Ken Grimes




----- Original Message ----- 
From: "Lewis Watson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, November 11, 2003 1:06 PM
Subject: [Modus] Modus server not responding.


> * This is the modus mailing list *
>
> Hi Ken,
> It shows in the logs where the msg was processed through the anti-spam

> stuff. It was under the file size for attachments and virus scanning. 
> Thanks. Lewis
>
> ----- Original Message -----
> From: "Ken Grimes" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, November 11, 2003 12:39 PM
> Subject: [Modus] Modus server not responding.
>
>
> > * This is the modus mailing list *
> >
> > Lewis,
> >
> > No coding like that in the source code, the message was from a local
> domain
> > being sent to a domain hosted elsewhere.  It looks fairly
> straightforward.
> > Have you lowered the size of scanning attachments....have you 
> > noticed if this helps?  We have run modus 2.x since it first was 
> > introduced without
> the
> > need to lower the size before but I am just curious.  I have pasted 
> > what
> we
> > have in the email but nothing like yours.
> >
> > Ken Grimes
> >
> > ----------------------------------------------------------------
> > ------=_NextPart_001_0025_01C3A837.C6ED1640
> > Content-Type: text/html;
> >  charset="Windows-1252"
> > Content-Transfer-Encoding: quoted-printable
> >
> > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> 
> > <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; =
> > charset=3Dwindows-1252">
> > <META content=3D"MSHTML 6.00.2800.1264" name=3DGENERATOR>
> > <STYLE></STYLE>
> > </HEAD>
> > <BODY bgColor=3D#ffffff>
> > <DIV><FONT face=3DArial size=3D2>I think I found a new way to save
my =
> > scans so we=20
> > don't have the same trouble as before.&nbsp; Attached is a picture
of, =
> > what we=20
> > call our little boy, Rocky.&nbsp; He's a Jack Russell and he'll be
two =
> > in=20
> > May.&nbsp; He's a mess.&nbsp; The other picture is Rebecca, Lance's
=
> > wife, and=20
> > Hailey, his daughter.&nbsp; I believe she is either two or three =
> > now.&nbsp; I=20
> > can't keep track anymore.&nbsp; </FONT></DIV>
> > <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> > <DIV><FONT face=3DArial size=3D2>Have a good one. </FONT></DIV>
> > <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> > <DIV><FONT face=3DArial size=3D2>Brooke</FONT></DIV></BODY></HTML>
> >
> > ------=_NextPart_001_0025_01C3A837.C6ED1640--
> >
> > ------=_NextPart_000_0024_01C3A837.C6E57520
> > Content-Type: application/msword;
> >  name="Rocky.doc"
> > Content-Transfer-Encoding: base64
> > Content-Disposition: attachment;
> >  filename="Rocky.doc"
> >
> >
> > --------------------------------------------------------------------
> > ----
> ----
> > -----------------------
> >
> > ----- Original Message -----
> > From: "Lewis Watson" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Tuesday, November 11, 2003 11:34 AM
> > Subject: [Modus] Modus server not responding.
> >
> >
> > > * This is the modus mailing list *
> > >
> > > It had images in the .doc file. Also, I did as you did and put the
> .msg
> > > file in a mailbox and pulled it from the server.. The .doc file 
> > > was attached and was indeed a normal intact file but there was 
> > > also this
> in
> > > the body of the email.
> > >
> > >
> {\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\froman\fcharset
> 0
> > > Times New Roman;}{\f1\fswiss\fcharset0
> Arial;}{\f2\froman\fprq2\fcharset0
> > > Times New Roman;}}
> > > {\colortbl 
> > > ;\red0\green0\blue0;\red128\green0\blue128;\red128\green0\blue0;}
> > > {\*\generator Msftedit
> 5.41.15.1503;}\viewkind4\uc1\pard\cf1\f0\fs24\par
> > > \pard\qc\cf0\f1\fs20{\pict\wmetafile8\picwgoal1485\pichgoal1185
> > >
> 0100090000037c0800000300be0000000000050000000b02aafda8fd050000000c02e6
> 04b1
> > > 0411
> > >
> 00000026060f001800ffffffff00001000a8fdffffaafdffff59020000900200000900
> 0000
> > > 2606
> > >
> 0f000800ffffffff020000001000000026060f001600ffffffff04000e00544e505007
> 0038
> > > 513d
> > >
> 50b50575000a00000026060f000a00544e505000000200f0030900000026060f000800
> ffff
> > > ffff
> > >
> 030000000f00000026060f001400544e505004000c0001000000010000000000000005
> 0000
> > > 000b
> > >
> 02aafda8fd050000000c02e604b1040900000026060f000800ffffffff000000000900
> 0000
> > > 2606
> > >
> > > and more and more and more of it. Looks like the binary file to 
> > > me...
> > >
> > > By chance was the sender of the email on yours from AOL? Lewis
> > >
> > >
> > >
> > >
> > >
> > > ----- Original Message ----- 
> > > From: "Ken Grimes" <[EMAIL PROTECTED]>
> > > To: <[EMAIL PROTECTED]>
> > > Sent: Tuesday, November 11, 2003 11:21 AM
> > > Subject: [Modus] Modus server not responding.
> > >
> > >
> > > > * This is the modus mailing list *
> > > >
> > > > Lewis,
> > > >
> > > > The one that was pulling down the system today was an attached
.doc
> file
> > > > approx 17meg, I don't think the message was inline just an
> attachment.
> > > Do
> > > > you know if your message was an image or just a straight word
> document?
> > > >
> > > > Curious,
> > > > Ken Grimes
> > > >
> > > >
> > > > ----- Original Message ----- 
> > > > From: "Lewis Watson" <[EMAIL PROTECTED]>
> > > > To: <[EMAIL PROTECTED]>
> > > > Sent: Tuesday, November 11, 2003 11:11 AM
> > > > Subject: [Modus] Modus server not responding.
> > > >
> > > >
> > > > > * This is the modus mailing list *
> > > > >
> > > > > Hi Ken,
> > > > > We had a problem this weekend with a .doc file. It was sitting
in
> the
> > > > > incoming folder and had pushed CPU at 100% and memory for
moduscan
> was
> > > > > over 110 MB. I am wondering if it has anything to do with
someone
> > > trying
> > > > > to email with the .doc file inline.
> > > > > Thanks.
> > > > > Lewis
> > > > >
> > > > >
> > > > >
> > > > > ----- Original Message ----- 
> > > > > From: "Ken Grimes" <[EMAIL PROTECTED]>
> > > > > To: <[EMAIL PROTECTED]>
> > > > > Sent: Tuesday, November 11, 2003 10:18 AM
> > > > > Subject: [Modus] Modus server not responding.
> > > > >
> > > > >
> > > > > > * This is the modus mailing list *
> > > > > >
> > > > > > I know someone has mentioned this on the list in the last
few
> days
> > > but
> > > > > we
> > > > > > had a few complaints from our customers today about the mail
> server
> > > > > timing
> > > > > > out and acting extremely slow to POP3 & SMTP & Webmail.  We
> found
> > > the
> > > > > oldest
> > > > > > message in the "invirus" folder and it was a 15 or 17meg
file
> that
> > > ended
> > > > > up
> > > > > > being a word document.  We copied the file to our mailbox
and
> > > downloaded
> > > > > it
> > > > > > and everything seems to function.  It is a bunch of pictures
in
> a
> > > .doc
> > > > > > format....obviously not the best format for sending images
but
> that
> > > is
> > > > > what
> > > > > > they chose.  The other incident I can remember that tripped
up
> the
> > > > > server
> > > > > > was a .doc file as well, is there a problem with certain
.doc
> files
> > > that
> > > > > > maybe is coming to head?  I have a copy of the message if
> someone
> > > would
> > > > > like
> > > > > > me to submit it, however I don't want to send it through the
> server
> > > > > > again...maybe we can move it to FTP.  Let me know if you
want
> it.
> > > > > >
> > > > > > BTW:  We fixed it by stopping all services and moving the
files
> out
> > > of
> > > > > the
> > > > > > "invirus" folder then restarting the services.
> > > > > >
> > > > > > Ken Grimes
> > > > > >
> > > > > >
> > > > > > **
> > > > > > To unsubscribe, send an Email to: [EMAIL PROTECTED]
> > > > > > with the word "UNSUBSCRIBE" in the body or subject line.
> > > > >
> > > > >
> > > > > **
> > > > > To unsubscribe, send an Email to: [EMAIL PROTECTED]
> > > > > with the word "UNSUBSCRIBE" in the body or subject line.
> > > >
> > > >
> > > > **
> > > > To unsubscribe, send an Email to: [EMAIL PROTECTED]
> > > > with the word "UNSUBSCRIBE" in the body or subject line.
> > >
> > >
> > > **
> > > To unsubscribe, send an Email to: [EMAIL PROTECTED]
> > > with the word "UNSUBSCRIBE" in the body or subject line.
> >
> >
> > **
> > To unsubscribe, send an Email to: [EMAIL PROTECTED]
> > with the word "UNSUBSCRIBE" in the body or subject line.
>
>
> **
> To unsubscribe, send an Email to: [EMAIL PROTECTED]
> with the word "UNSUBSCRIBE" in the body or subject line.


**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.


**
To unsubscribe, send an Email to: [EMAIL PROTECTED]
with the word "UNSUBSCRIBE" in the body or subject line.

Reply via email to