Re: [Declude.JunkMail] multiple simultaneous problems

[Darrell ([EMAIL PROTECTED])]

Check the IMAP logs of recent compared to some of the older ones.  We 
should rule out that someone is not hitting you with excessive 
connections etc.  A couple weeks ago one of my systems started having 
problems with the POP3 service being slow or timing out.  It turned out 
someone was running an automated tool to try and crack accounts/passwords.


Darrell
--
Check out http://www.invariantsystems.com for utilities for Declude, 
Imail, mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, 
SURBL/URI integration, MRTG Integration, and Log Parsers.



David Dodell wrote:

-Original Message-
From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED]



Which RBL's are timing out?  Is your DNS server having problems?  Is 



your DNS server local to the mail server or is it located somewhere else?




It is totally random ... sometimes none of them for several messages, other 
times, the first several work, and the rest fail ... doesn't seem to be any 
pattern




(3) IMAP4d32.exe  services are running 99% of the cpu time ...


This will essentially starve out Declude and anything else.  I have seen 


several folks have this issue on the Imail list.  What version of Imail 



are you using?




9.23 since it was released ... been running it for a while.



Any thoughts on where to start ... I've rebooted, stopped services, 


restarted services ... works fine for about 8 hrs then starts up all 



over again





I would start with the IMAP4D issue.






Darrell, I agree ... just wish I knew what was affecting it.



Another response suggested the file system ... and I noticed the comment from 
the Sniffer people about NTFS.



We have had some bad sectors on our hard drive starting about a few weeks ago 
... Ran chkdsk etc and that seemed to have caught them, ran a defrag session 
today ...

I order today a new Barracuda ES2 drive for the server, which will arrive 
Monday and I'll attempt to clone.



Linda @ Declude suggested I might be having a bad network card go bad, which 
she thinks is attributing to the failed RBL issues, but I don't think that 
would affect the IMAP usage.



Short of installing a new network card / drive ... any other thoughts what to 
try?



David


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.


--



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Re: multiple simultaneous problems

[David Dodell]

.On Mar 1, 2008, at 8:55 AM, Darrell ([EMAIL PROTECTED])  
wrote:



Check the IMAP logs of recent compared to some of the older ones.


I think we found the problem this morning with everyone's help.

Luckily, I don't have a lot of active users so I started calling them  
one by one.


One user when he opened imap connections from his notebook, either  
using Apple's Mail, or Thunderbird, would immediately see the imap  
process go to 100% cpu.


If I did it with my accounts, or any other users, normal usage.

We have deleted his account and files, and recreated ... and  
everything seems normal.


The user in question had a 500MB mailbox with messages that were  
almost 2 years old ... I'm going on the suspicious behavior that  
everyone else posted about that he indeed had a corrupted mailbox, and  
this is what was causing my problems.


He did tell me he left his computer on all day so this would explain  
why shutting down and restarting would cause the process to happen  
again 10 minutes later.


Now on to the Declude issues ... I bought a new network card to see if  
this is why I'm loosing connections to the DBL BUT I'm running first  
without the new card, hoping the extensive CPU time was just fouling  
up the  DNS tests, and they were just timing out and there were no  
hardware issues.


---

I REALLY APPRECIATE EVERYONE'S HELP ... VERY MUCH APPRECIATED!

David


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.