RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
Having said that could it be one of the external tests that Declude is calling? In other words, it would appear that the problem is with Declude.exe but it's really with a shelled process that declude is calling? That shouldn't cause this -- Declude will timeout the external process if it takes too long.Looks like this is the problem.I removed all of our External tests except Sniffer and the problem has gone away.Anyone had problems with SpamChk or the others listed here?Here's what we're running?#SUBJECT-OBFUSCATE external weight "e:\IMail\Declude\obfsubj.exe PATH=e:\IMail\declude\OBSubFilters LOG=HIGH CW=%WEIGHT% SW=350 %SUBJECT%" 0 0#HEADERCODE-FILTER external weight "e:\IMail\Declude\HEADER2.exe PATH=e:\IMail\declude\HeaderFilters LOG=HIGH CW=%WEIGHT% SW=350 %HEADERCODE%" 0 0#DISPLAY-FROM external weight "e:\IMail\Declude\dispfrom.exe PATH=e:\IMail\declude\DispFrom LOG=HIGH CW=%WEIGHT% SW=350 %HEADERS%" 40 0#Size Tests#SIZE-XXS Result Code 11 - Less than 0.5 KB (but not zero)#SIZE-XS Result Code 12 - Between 0.5 KB and 5 KB#SIZE-S Result Code 13 - Between 5 KB and 30 KB#SIZE-M Result Code 14 - Between 30 KB and 100 KB#SIZE-L Result Code 15 - Between 100 KB and 300 KB#SIZE-XL Result Code 16 - Between 300 KB and 1000 KB#SIZE-XXL Result Code 17 - Greater than or equal to 1000 KB## Values# SZ = String of Message Sizes# CW = Current Weight# SW = Skip Weight#SIZE-XXS external 11 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 20 0#SIZE-XS external 12 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-S external 13 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-M external 14 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-L external 15 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=140" -20 0#SIZE-XL external 16 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=150" -30 0#SIZE-XXL external 17 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=170" -50 0# SNIFFER TESTSMS-TRAVEL external 047 "SNIFFER_CODE" 100 0MS-INSURANCE external 048 "SNIFFER_CODE" 150 0MS-AV-PUSH external 049 "SNIFFER_CODE" 100 0MS-THEFT external 050 "SNIFFER_CODE" 150 0MS-SPAMWARE external 051 "SNIFFER_CODE" 150 0MS-SNAKEOIL external 052 "SNIFFER_CODE" 150 0MS-SCAMS external 053 "SNIFFER_CODE" 150 0MS-PORN external 054 "SNIFFER_CODE" 170 0MS-MALWARE external 055 "SNIFFER_CODE" 170 0MS-SALES external 056 "SNIFFER_CODE" 150 0MS-SCHEMES external 057 "SNIFFER_CODE" 150 0MS-CREDIT external 058 "SNIFFER_CODE" 150 0MS-GAMBLING external 059 "SNIFFER_CODE" 150 0MS-GREYMAIL external 060 "SNIFFER_CODE" 90 0MS-OBFUSCATION external 061 "SNIFFER_CODE" 150 0MS-SPAM external 062 "SNIFFER_CODE" 120 0MS-GENERAL external 063 "SNIFFER_CODE" 120 0MS-WHITE external 000 "SNIFFER_CODE" 0 0# SPAMCHK#SPAMCHK external weight "e:\IMail\declude\SpamChk\spamchk.exe"
RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
Never seen this problem but at this time I've running 3 external tests. in your cfg I can see 12 different calls of external programs Add the call of declude.exe and maybe 2 av-engines and multiply this number by the number of messages your server is processing each day. I assume it will be a big value. Maybe too big for your server. Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. SmithSent: Thursday, December 16, 2004 1:18 PMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude Having said that could it be one of the external tests that Declude is calling? In other words, it would appear that the problem is with Declude.exe but it's really with a shelled process that declude is calling? That shouldn't cause this -- Declude will timeout the external process if it takes too long.Looks like this is the problem.I removed all of our External tests except Sniffer and the problem has gone away.Anyone had problems with SpamChk or the others listed here?Here's what we're running?#SUBJECT-OBFUSCATE external weight "e:\IMail\Declude\obfsubj.exe PATH=e:\IMail\declude\OBSubFilters LOG=HIGH CW=%WEIGHT% SW=350 %SUBJECT%" 0 0#HEADERCODE-FILTER external weight "e:\IMail\Declude\HEADER2.exe PATH=e:\IMail\declude\HeaderFilters LOG=HIGH CW=%WEIGHT% SW=350 %HEADERCODE%" 0 0#DISPLAY-FROM external weight "e:\IMail\Declude\dispfrom.exe PATH=e:\IMail\declude\DispFrom LOG=HIGH CW=%WEIGHT% SW=350 %HEADERS%" 40 0#Size Tests#SIZE-XXS Result Code 11 - Less than 0.5 KB (but not zero)#SIZE-XS Result Code 12 - Between 0.5 KB and 5 KB#SIZE-S Result Code 13 - Between 5 KB and 30 KB#SIZE-M Result Code 14 - Between 30 KB and 100 KB#SIZE-L Result Code 15 - Between 100 KB and 300 KB#SIZE-XL Result Code 16 - Between 300 KB and 1000 KB#SIZE-XXL Result Code 17 - Greater than or equal to 1000 KB## Values# SZ = String of Message Sizes# CW = Current Weight# SW = Skip Weight#SIZE-XXS external 11 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 20 0#SIZE-XS external 12 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-S external 13 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-M external 14 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-L external 15 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=140" -20 0#SIZE-XL external 16 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=150" -30 0#SIZE-XXL external 17 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=170" -50 0# SNIFFER TESTSMS-TRAVEL external 047 "SNIFFER_CODE" 100 0MS-INSURANCE external 048 "SNIFFER_CODE" 150 0MS-AV-PUSH external 049 "SNIFFER_CODE" 100 0MS-THEFT external 050 "SNIFFER_CODE" 150 0MS-SPAMWARE external 051 "SNIFFER_CODE" 150 0MS-SNAKEOIL external 052 "SNIFFER_CODE" 150 0MS-SCAMS external 053 "SNIFFER_CODE" 150 0MS-PORN external 054 "SNIFFER_CODE" 170 0MS-MALWARE external 055 "SNIFFER_CODE" 170 0MS-SALES external 056 "SNIFFER_CODE" 150 0MS-SCHEMES external 057 "SNIFFER_CODE" 150 0MS-CREDIT external 058 "SNIFFER_CODE" 150 0MS-GAMBLING external 059 "SNIFFER_CODE" 150 0MS-GREYMAIL external 060 "SNIFFER_CODE" 90 0MS-OBFUSCATION external 061 "SNIFFER_CODE" 150 0MS-SPAM external 062 "SNIFFER_CODE" 120 0MS-GENERAL external 063 "SNIFFER_CODE" 120 0MS-WHITE external 000 "SNIFFER_CODE" 0 0# SPAMCHK#SPAMCHK external weight "e:\IMail\declude\SpamChk\spamchk.exe"
RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
We're pushing about 150,000 messages per day through this server. Dual processor 2Ghz, 2GB RAM, RAID 5. This server ONLY runs Imail/Declude as a gateway. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus GuflerSent: Thursday, December 16, 2004 8:08 AMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude Never seen this problem but at this time I've running 3 external tests. in your cfg I can see 12 different calls of external programs Add the call of declude.exe and maybe 2 av-engines and multiply this number by the number of messages your server is processing each day. I assume it will be a big value. Maybe too big for your server. Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. SmithSent: Thursday, December 16, 2004 1:18 PMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude Having said that could it be one of the external tests that Declude is calling? In other words, it would appear that the problem is with Declude.exe but it's really with a shelled process that declude is calling? That shouldn't cause this -- Declude will timeout the external process if it takes too long.Looks like this is the problem.I removed all of our External tests except Sniffer and the problem has gone away.Anyone had problems with SpamChk or the others listed here?Here's what we're running?#SUBJECT-OBFUSCATE external weight "e:\IMail\Declude\obfsubj.exe PATH=e:\IMail\declude\OBSubFilters LOG=HIGH CW=%WEIGHT% SW=350 %SUBJECT%" 0 0#HEADERCODE-FILTER external weight "e:\IMail\Declude\HEADER2.exe PATH=e:\IMail\declude\HeaderFilters LOG=HIGH CW=%WEIGHT% SW=350 %HEADERCODE%" 0 0#DISPLAY-FROM external weight "e:\IMail\Declude\dispfrom.exe PATH=e:\IMail\declude\DispFrom LOG=HIGH CW=%WEIGHT% SW=350 %HEADERS%" 40 0#Size Tests#SIZE-XXS Result Code 11 - Less than 0.5 KB (but not zero)#SIZE-XS Result Code 12 - Between 0.5 KB and 5 KB#SIZE-S Result Code 13 - Between 5 KB and 30 KB#SIZE-M Result Code 14 - Between 30 KB and 100 KB#SIZE-L Result Code 15 - Between 100 KB and 300 KB#SIZE-XL Result Code 16 - Between 300 KB and 1000 KB#SIZE-XXL Result Code 17 - Greater than or equal to 1000 KB## Values# SZ = String of Message Sizes# CW = Current Weight# SW = Skip Weight#SIZE-XXS external 11 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 20 0#SIZE-XS external 12 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-S external 13 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-M external 14 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-L external 15 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=140" -20 0#SIZE-XL external 16 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=150" -30 0#SIZE-XXL external 17 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=170" -50 0# SNIFFER TESTSMS-TRAVEL external 047 "SNIFFER_CODE" 100 0MS-INSURANCE external 048 "SNIFFER_CODE" 150 0MS-AV-PUSH external 049 "SNIFFER_CODE" 100 0MS-THEFT external 050 "SNIFFER_CODE" 150 0MS-SPAMWARE external 051 "SNIFFER_CODE" 150 0MS-SNAKEOIL external 052 "SNIFFER_CODE" 150 0MS-SCAMS external 053 "SNIFFER_CODE" 150 0MS-PORN external 054 "SNIFFER_CODE" 170 0MS-MALWARE external 055 "SNIFFER_CODE" 170 0MS-SALES external 056 "SNIFFER_CODE" 150 0MS-SCHEMES external 057 "SNIFFER_CODE" 150 0MS-CREDIT external 058 "SNIFFER_CODE" 150 0MS-GAMBLING external 059 "SNIFFER_CODE" 150 0MS-GREYMAIL external
RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
So 150,000 msgs x 15 exes = 225 ... due to prefiltered viruses let's say 1,500,000 exe calls each day. Or in other words: each processor has to run around 8 exes each second, not considering peak and low-traffic times. Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. SmithSent: Thursday, December 16, 2004 4:33 PMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude We're pushing about 150,000 messages per day through this server. Dual processor 2Ghz, 2GB RAM, RAID 5. This server ONLY runs Imail/Declude as a gateway. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus GuflerSent: Thursday, December 16, 2004 8:08 AMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude Never seen this problem but at this time I've running 3 external tests. in your cfg I can see 12 different calls of external programs Add the call of declude.exe and maybe 2 av-engines and multiply this number by the number of messages your server is processing each day. I assume it will be a big value. Maybe too big for your server. Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. SmithSent: Thursday, December 16, 2004 1:18 PMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude Having said that could it be one of the external tests that Declude is calling? In other words, it would appear that the problem is with Declude.exe but it's really with a shelled process that declude is calling? That shouldn't cause this -- Declude will timeout the external process if it takes too long.Looks like this is the problem.I removed all of our External tests except Sniffer and the problem has gone away.Anyone had problems with SpamChk or the others listed here?Here's what we're running?#SUBJECT-OBFUSCATE external weight "e:\IMail\Declude\obfsubj.exe PATH=e:\IMail\declude\OBSubFilters LOG=HIGH CW=%WEIGHT% SW=350 %SUBJECT%" 0 0#HEADERCODE-FILTER external weight "e:\IMail\Declude\HEADER2.exe PATH=e:\IMail\declude\HeaderFilters LOG=HIGH CW=%WEIGHT% SW=350 %HEADERCODE%" 0 0#DISPLAY-FROM external weight "e:\IMail\Declude\dispfrom.exe PATH=e:\IMail\declude\DispFrom LOG=HIGH CW=%WEIGHT% SW=350 %HEADERS%" 40 0#Size Tests#SIZE-XXS Result Code 11 - Less than 0.5 KB (but not zero)#SIZE-XS Result Code 12 - Between 0.5 KB and 5 KB#SIZE-S Result Code 13 - Between 5 KB and 30 KB#SIZE-M Result Code 14 - Between 30 KB and 100 KB#SIZE-L Result Code 15 - Between 100 KB and 300 KB#SIZE-XL Result Code 16 - Between 300 KB and 1000 KB#SIZE-XXL Result Code 17 - Greater than or equal to 1000 KB## Values# SZ = String of Message Sizes# CW = Current Weight# SW = Skip Weight#SIZE-XXS external 11 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 20 0#SIZE-XS external 12 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-S external 13 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-M external 14 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=120" 0 0#SIZE-L external 15 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=140" -20 0#SIZE-XL external 16 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=150" -30 0#SIZE-XXL external 17 "e:\IMail\Declude\Size.exe SZ=.5,5,30,100,300,1000 CW=%WEIGHT% SW=170" -50 0# SNIFFER TESTSMS-TRAVEL external 047 "SNIFFER_CODE" 100 0MS-INSURANCE external 048 "SNIFFER_CODE" 150 0MS-AV-PUSH external 049 "SNIFFER_CODE" 100 0MS-THEFT external 050 "SNIFFER_CODE" 150 0MS-SPAMWARE external 051 "SNIFFER_CODE" 150 0MS-SNA
RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
How does Imail know if Declude has run on these files?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R.
Scott Perry
Sent: Wednesday, December 15, 2004 2:41 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Imail/Declude queues backing
up - I think it's Declude
When the _{message_ID}.~MD messages appear, if I stop the
queue service
and restart then they turn into Q{message_ID}.RMD files
In that case, it appears that the IMail queue service, when
started, will automatically unlock any locked E-mails. That
is OK if they are at least 1 hour old, or a bad thing if they
aren't yet 1 hour old (as it can interfere with Declude, as
Declude isn't expecting the files to be renamed, and IMail
will not call Declude if it hasn't already been called).
If I rename them from RMD to SMD then they are delivered ...
Correct.
... BUT the Declude Junkmail XNote signature info isn't in
the SMTP header.
Correct. If the files are locked before Declude gets a
chance to scan the E-mail, when the queue manager unlocks
them, it should send them to Declude
-- but it is not.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader
in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
This outgoing message is guaranteed to be authentic by
Message Level users.
Guarantee the authenticity of your email @
http://www.messagelevel.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be
found at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
When the _{message_ID}.~MD messages appear, if I stop the queue service
and restart then they turn into Q{message_ID}.RMD files
In that case, it appears that the IMail queue service, when started, will
automatically unlock any locked E-mails. That is OK if they are at least 1
hour old, or a bad thing if they aren't yet 1 hour old (as it can interfere
with Declude, as Declude isn't expecting the files to be renamed, and IMail
will not call Declude if it hasn't already been called).
If I rename them from RMD to SMD then they are delivered ...
Correct.
... BUT the Declude Junkmail XNote signature info isn't in the SMTP header.
Correct. If the files are locked before Declude gets a chance to scan the
E-mail, when the queue manager unlocks them, it should send them to Declude
-- but it is not.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
This outgoing message is guaranteed to be authentic by Message Level users.
Guarantee the authenticity of your email @ http://www.messagelevel.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
We had a similar problem where simply upping the
Delivery and Retry Threads for the Queue Manager fixed it.
Darin.
- Original Message -
From: Mark E.
Smith
To: [EMAIL PROTECTED]
Sent: Wednesday, December 15, 2004 2:35 PM
Subject: RE: [Declude.JunkMail] Imail/Declude queues backing up - I
think it's Declude
Ok I did some more digging and think this might be
Declude.
When the _{message_ID}.~MD messages appear, if I stop
the queue service and restart then they turn into Q{message_ID}.RMD
files
If I rename them from RMD to SMD then they are
delivered BUT the Declude Junkmail XNote signature info isn't in the SMTP
header.
So it would seem to me that Declude causing these
messages to become locked... or am I misunderstanding the flow of how Imail
calls Declude?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin
CoxSent: Wednesday, December 15, 2004 8:56 AMTo:
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail]
Imail/Declude queues backing up
The RMDs areSMD files that were in-process
when the queue manager was halted. Rename them back to SMDs if you want
them delivered. Same for RTFs and NTFs. NTFs are discussed
here:
IMail - Spool directory - an explanation of
files
http://support.ipswitch.com/kb/IM-19981110-DD08.htm
Darin.
- Original Message -
From: Mark E.
Smith
To: [EMAIL PROTECTED]
Sent: Wednesday, December 15, 2004 7:38 AM
Subject: RE: [Declude.JunkMail] Imail/Declude queues backing
up
Just a little more information.
When I restart the queue service, the _{message_ID}.~MD
files are usually instantly renamed to Q{Message_ID}.RMD
I've never seen an .RMD extension --
anyone?
Also, I've noticed a few D{ID}.RTF and D{ID}.NTF
extensions.
Anyone seen these before?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Tuesday, December 14, 2004 4:48 PMTo:
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail]
Imail/Declude queues backing up
It sounds like running Dr Watson and how it interacts with SMTP
is causing the issue and disabling it might help. I'm not sure how
though.I have never had this issue (knock on wood), and I have
certainly processed enough E-mail for me to have hit a file that SMTP chokes
on. Our spam blocking performs very well, so it may be that broken
messages are killed by Declude (we have filters for broken/partial
messages).Since we started gateing E-mail through MS SMTP with ORF,
the issues with spool files being locked for hours disappeared. This
eats up threads and might also contribute to the crashes. We have
configured MS SMTP to timeout after only 1 minute, and as a result, there
are never any of these locked files older than 1 minute in our spool whereas
there used to be many of them. We have only been doing this for about
2 months, so it isn't solely responsible for the fact that we haven't seen
this instability.Also, once I helped another administrator fix their
issue. What was happening was the IMail Monitor was rebooting SMTP
when it was unresponsive, and it would occasionally cause the server to hang
(about once to several times a day when it started out of the blue).
Turning off the Monitor fixed the problem since the SMTP service was only
non-responsive as a temporary condition, and Monitor was causing the hang by
forcing a restart of the service without properly killing the process.
I don't run Monitor, and SMTP hasn't crashed on my server in my
recollection, even when the server was redlined at 100% for an
hour.Hope this helps.MattMark E.
Smith wrote:
This is happening to us on 8.13 2004.8.27.12
More specifically, I'm seeing the messages getting stuck as
_{MESSAGE_ID}.~MD
Imail's support page says these messages are queued for delivery for 2
hours. Problem is they just stay there.
http://support.ipswitch.com/kb/IM-19981110-DD08.htm
If I rename the _ and .~MD message the message goes out but it is NOT
scanned by Declude. (Nothing's in the SMTP header).
We have the queue manager skipping domains and dns cached disabled
(unchecked).
Any thoughts?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Darin Cox
Sent: Tuesday, December 14, 2004 11:36 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Imail/Declude queues backing up
What version are you experiencing this with? We had the same
problem with a PDF that IMail choked on. Updating to 8.05
HF3 fixed it for us, and we haven't seen it since.
Darin.
- Original Message -
From: "Charles Frolick" [EMAIL PROTECTED]
To: "Mark E. Smith" [EMAIL PROTECTED]
Sent: Tuesday, December 14, 2004 10:24 AM
Subject: Re: [Declude.JunkMail] Imail/Declude queues backing up
Hello Mark,
Monday, December 13, 2004, 10
RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
Ok I did some more digging and think this might be
Declude.
When the _{message_ID}.~MD messages appear, if I stop
the queue service and restart then they turn into Q{message_ID}.RMD
files
If I rename them from RMD to SMD then they are
delivered BUT the Declude Junkmail XNote signature info isn't in the SMTP
header.
So it would seem to me that Declude causing these
messages to become locked... or am I misunderstanding the flow of how Imail
calls Declude?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin
CoxSent: Wednesday, December 15, 2004 8:56 AMTo:
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail]
Imail/Declude queues backing up
The RMDs areSMD files that were in-process
when the queue manager was halted. Rename them back to SMDs if you want
them delivered. Same for RTFs and NTFs. NTFs are discussed
here:
IMail - Spool directory - an explanation of
files
http://support.ipswitch.com/kb/IM-19981110-DD08.htm
Darin.
- Original Message -
From: Mark E.
Smith
To: [EMAIL PROTECTED]
Sent: Wednesday, December 15, 2004 7:38 AM
Subject: RE: [Declude.JunkMail] Imail/Declude queues backing
up
Just a little more information.
When I restart the queue service, the _{message_ID}.~MD
files are usually instantly renamed to Q{Message_ID}.RMD
I've never seen an .RMD extension --
anyone?
Also, I've noticed a few D{ID}.RTF and D{ID}.NTF
extensions.
Anyone seen these before?
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Tuesday, December 14, 2004 4:48 PMTo:
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail]
Imail/Declude queues backing up
It sounds like running Dr Watson and how it interacts with SMTP
is causing the issue and disabling it might help. I'm not sure how
though.I have never had this issue (knock on wood), and I have
certainly processed enough E-mail for me to have hit a file that SMTP chokes
on. Our spam blocking performs very well, so it may be that broken
messages are killed by Declude (we have filters for broken/partial
messages).Since we started gateing E-mail through MS SMTP with ORF,
the issues with spool files being locked for hours disappeared. This
eats up threads and might also contribute to the crashes. We have
configured MS SMTP to timeout after only 1 minute, and as a result, there
are never any of these locked files older than 1 minute in our spool whereas
there used to be many of them. We have only been doing this for about
2 months, so it isn't solely responsible for the fact that we haven't seen
this instability.Also, once I helped another administrator fix their
issue. What was happening was the IMail Monitor was rebooting SMTP
when it was unresponsive, and it would occasionally cause the server to hang
(about once to several times a day when it started out of the blue).
Turning off the Monitor fixed the problem since the SMTP service was only
non-responsive as a temporary condition, and Monitor was causing the hang by
forcing a restart of the service without properly killing the process.
I don't run Monitor, and SMTP hasn't crashed on my server in my
recollection, even when the server was redlined at 100% for an
hour.Hope this helps.MattMark E.
Smith wrote:
This is happening to us on 8.13 2004.8.27.12
More specifically, I'm seeing the messages getting stuck as
_{MESSAGE_ID}.~MD
Imail's support page says these messages are queued for delivery for 2
hours. Problem is they just stay there.
http://support.ipswitch.com/kb/IM-19981110-DD08.htm
If I rename the _ and .~MD message the message goes out but it is NOT
scanned by Declude. (Nothing's in the SMTP header).
We have the queue manager skipping domains and dns cached disabled
(unchecked).
Any thoughts?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Darin Cox
Sent: Tuesday, December 14, 2004 11:36 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Imail/Declude queues backing up
What version are you experiencing this with? We had the same
problem with a PDF that IMail choked on. Updating to 8.05
HF3 fixed it for us, and we haven't seen it since.
Darin.
- Original Message -
From: "Charles Frolick" [EMAIL PROTECTED]
To: "Mark E. Smith" [EMAIL PROTECTED]
Sent: Tuesday, December 14, 2004 10:24 AM
Subject: Re: [Declude.JunkMail] Imail/Declude queues backing up
Hello Mark,
Monday, December 13, 2004, 10:04:38 AM, you wrote:
MES Has anyone experienced a problem when using
Imail/Declude as a gateway
where
MES some random messages just seem to backup in the queue
for no reason?
We'll
MES go into Imail's queue manager, select them and hit send
now and the
queue
MES opens up a flood gate of messages.
MES I wish I had more info but I'm not sure
RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
Well, of course I knew Ipswitch would say this but I'll post it anyway. :)
Ipswitch says that the problem is that declude is locking the file but not
unlocking it when it's done.
Having said that could it be one of the external tests that Declude is
calling?
In other words, it would appear that the problem is with Declude.exe but
it's really with a shelled process that declude is calling?
They want me to remove declude before proceeding but I can't do that. :)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R.
Scott Perry
Sent: Wednesday, December 15, 2004 2:41 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Imail/Declude queues backing
up - I think it's Declude
When the _{message_ID}.~MD messages appear, if I stop the
queue service
and restart then they turn into Q{message_ID}.RMD files
In that case, it appears that the IMail queue service, when
started, will automatically unlock any locked E-mails. That
is OK if they are at least 1 hour old, or a bad thing if they
aren't yet 1 hour old (as it can interfere with Declude, as
Declude isn't expecting the files to be renamed, and IMail
will not call Declude if it hasn't already been called).
If I rename them from RMD to SMD then they are delivered ...
Correct.
... BUT the Declude Junkmail XNote signature info isn't in
the SMTP header.
Correct. If the files are locked before Declude gets a
chance to scan the E-mail, when the queue manager unlocks
them, it should send them to Declude
-- but it is not.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader
in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
This outgoing message is guaranteed to be authentic by
Message Level users.
Guarantee the authenticity of your email @
http://www.messagelevel.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be
found at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail/Declude queues backing up - I think it's Declude
How does Imail know if Declude has run on these files? It doesn't know. But since it doesn't keep track, it has to start Declude. Scanning an E-mail twice won't hurt (except for CPU usage), but not scanning it will hurt (it can cause Evil E-mails to come through). Ipswitch says that the problem is that declude is locking the file but not unlocking it when it's done. The best thing to do in this case is to look at the IMail and Declude log file entries for one of these E-mails, before restarting the queue manager. The entries for the E-mail should stop somewhere, which will provide clues as to what is happening to the E-mail. Having said that could it be one of the external tests that Declude is calling? In other words, it would appear that the problem is with Declude.exe but it's really with a shelled process that declude is calling? That shouldn't cause this -- Declude will timeout the external process if it takes too long. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
