RE: [Declude.JunkMail] SMD files showing up in different directories
You need to have a virus.cfg file which determines the location of the quarantined files. To help me understand, what is it you would like to do? Turn off all virus scanning and vulnerability detection ? David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Stanford Sent: Friday, September 21, 2007 8:53 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] SMD files showing up in different directories In August I upgraded to version 4. Since that time I have smd files showing up in the root of C:. Here is a copy of the header: X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2670 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670 X-Declude-Sender: [EMAIL PROTECTED] [10.100.1.17] X-Declude-Spoolname: D90920096dba2.smd X-Declude-RefID: X-Declude-Note: Scanned by Declude 4.3.46 http://www.declude.com/x-note.htm; X-Declude-Scan: Incoming Score [0] at 04:36:22 on 21 Sep 2007 X-Declude-Tests: None X-Country-Chain: X-Declude-Code: 0 X-Declude-Recipcount: 2 X-Helo: X-RevDNS: X-Declude-Virus: Detected [Outlook 'CR' Vulnerability] [from IP 10.100.1.17 ()]. What do I do to change the directory this is put into or stop it all together? I thought I had turned off the virus scanner feature of Declude...but apparently not. Thanks, Kevin --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SMD Files
Title: Message The article talked about getting ICMP packets for the MTU updates. I guess I will plug in my sniffer and see if this is happening to determine if this is the problem. Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Sunday, April 24, 2005 8:04 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Another recent problematic patch is: MS05-019 aka KB898060, see: http://support.microsoft.com/default.aspx?scid=898060 It has to do with the TCP/IP MTA value being set. I imagine this would mostly affect people with PPPoE connections or anywhere a connection is through a routerconfigured for a non-standard MTU size. And sometimes, it's one particular sender that clogs up your Spool folder with broken T*.smd files. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Saturday, April 23, 2005 7:30 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] SMD Files Not saying this is your problem - but... If you have applied the KB 893066 patch from the latest round of MS Patches you may want to look into that. We have seen substantial issues with this patch internally and externally. Darrell --- invURIBL - Intelligent URI filtering plug-in for Declude. Stops 85% of the SPAM with the default configuration. Try it for free - http://www.invariantsystems.com - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Saturday, April 23, 2005 2:40 AM Subject: RE: [Declude.JunkMail] SMD Files Ok thanks John. Why do you think this just started happening the past 3 days I went from about 200 spool files to 1000 during the day and then 2 days later there are all of those left over files. Do you mean the SMTP session from the client. I have had some complaints (for about two weeks) from clients (connected by T1) saying they are getting SMTP errors occasionally. They have there client set to check mail every 5 minutes and throughout the day they get SMTP connection errors. I mean I really dont know I am just searching at this point, but thanks for the info Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, April 23, 2005 12:28 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 2:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 3:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
RE: [Declude.JunkMail] SMD Files
Title: Message Another recent problematic patch is: MS05-019 aka KB898060, see: http://support.microsoft.com/default.aspx?scid=898060 It has to do with the TCP/IP MTA value being set. I imagine this would mostly affect people with PPPoE connections or anywhere a connection is through a routerconfigured for a non-standard MTU size. And sometimes, it's one particular sender that clogs up your Spool folder with broken T*.smd files. Andrew 8) -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])Sent: Saturday, April 23, 2005 7:30 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] SMD Files Not saying this is your problem - but... If you have applied the KB 893066 patch from the latest round of MS Patches you may want to look into that. We have seen substantial issues with this patch internally and externally. Darrell --- invURIBL - Intelligent URI filtering plug-in for Declude. Stops 85% of theSPAM with the default configuration. Try it for free - http://www.invariantsystems.com - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Saturday, April 23, 2005 2:40 AM Subject: RE: [Declude.JunkMail] SMD Files Ok thanks John. Why do you think this just started happening the past 3 days I went from about 200 spool files to 1000 during the day and then 2 days later there are all of those left over files. Do you mean the SMTP session from the client. I have had some complaints (for about two weeks) from clients (connected by T1) saying they are getting SMTP errors occasionally. They have there client set to check mail every 5 minutes and throughout the day they get SMTP connection errors. I mean I really dont know I am just searching at this point, but thanks for the info Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)Sent: Saturday, April 23, 2005 12:28 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] SMD Files T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle FisherSent: Friday, April 22, 2005 2:49 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle FisherSent: Friday, April 22, 2005 3:50 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
Re: [Declude.JunkMail] SMD Files
Title: Message Andrew, The issue I referenced below citing 893066 is the same patch you mentioned. 893066 is the KB for the MS05-19 patch. 898060 is a secondary KB that addresses the issues I referenced below with the MS05-19 patch (i.e. how to get the hotfix to correct the issue). Let me tell you the battle with this patch we had was not very fun... Darrell - Original Message - From: Colbeck, Andrew To: Declude.JunkMail@declude.com Sent: Sunday, April 24, 2005 9:04 PM Subject: RE: [Declude.JunkMail] SMD Files Another recent problematic patch is: MS05-019 aka KB898060, see: http://support.microsoft.com/default.aspx?scid=898060 It has to do with the TCP/IP MTA value being set. I imagine this would mostly affect people with PPPoE connections or anywhere a connection is through a routerconfigured for a non-standard MTU size. And sometimes, it's one particular sender that clogs up your Spool folder with broken T*.smd files. Andrew 8) -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])Sent: Saturday, April 23, 2005 7:30 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] SMD Files Not saying this is your problem - but... If you have applied the KB 893066 patch from the latest round of MS Patches you may want to look into that. We have seen substantial issues with this patch internally and externally. Darrell --- invURIBL - Intelligent URI filtering plug-in for Declude. Stops 85% of theSPAM with the default configuration. Try it for free - http://www.invariantsystems.com - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Saturday, April 23, 2005 2:40 AM Subject: RE: [Declude.JunkMail] SMD Files Ok thanks John. Why do you think this just started happening the past 3 days I went from about 200 spool files to 1000 during the day and then 2 days later there are all of those left over files. Do you mean the SMTP session from the client. I have had some complaints (for about two weeks) from clients (connected by T1) saying they are getting SMTP errors occasionally. They have there client set to check mail every 5 minutes and throughout the day they get SMTP connection errors. I mean I really dont know I am just searching at this point, but thanks for the info Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)Sent: Saturday, April 23, 2005 12:28 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] SMD Files T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle FisherSent: Friday, April 22, 2005 2:49 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle FisherSent: Friday, April 22, 2005 3:50 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail
RE: [Declude.JunkMail] SMD Files
Ok thanks John. Why do you think this just started happening the past 3 days I went from about 200 spool files to 1000 during the day and then 2 days later there are all of those left over files. Do you mean the SMTP session from the client. I have had some complaints (for about two weeks) from clients (connected by T1) saying they are getting SMTP errors occasionally. They have there client set to check mail every 5 minutes and throughout the day they get SMTP connection errors. I mean I really dont know I am just searching at this point, but thanks for the info Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, April 23, 2005 12:28 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 2:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 3:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
RE: [Declude.JunkMail] SMD Files
Having the clients check for new mail every 10 minutes is better than 5 minutes. Sounds like you need to start analyzing the logs for a sudden jump in the amount of outgoing messages. You should also analyze the logs for error messages. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 11:41 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Ok thanks John. Why do you think this just started happening the past 3 days I went from about 200 spool files to 1000 during the day and then 2 days later there are all of those left over files. Do you mean the SMTP session from the client. I have had some complaints (for about two weeks) from clients (connected by T1) saying they are getting SMTP errors occasionally. They have there client set to check mail every 5 minutes and throughout the day they get SMTP connection errors. I mean I really dont know I am just searching at this point, but thanks for the info Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, April 23, 2005 12:28 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 2:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 3:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
Re: [Declude.JunkMail] SMD Files
SMTP is a chatty protocol and it's likely that connectivity problems will show up with SMTP and POP, before they are detected with most other protocols. These connection issues could easily be the client's problem, due to a faulty T-1 connection, i.e. dirty bandwidth, a failing local loop (SBC is famous for using anything for a bridge tap in our venue), etc. The left over T files, however, point to the problem being on your end. Check your router for CRC, Framing and other data comm errors as well as interface resets and lost carrier. Most routers have counters you can display. In my experience, that's the most likely cause of the problem. If the router is clean, then start eliminating the other possibilities on the circuit to your mail server. Ipswitch will tell you to replace your NIC with a high dollar 3COM card. (I think Tech support reps gets that tattooed on the back of their hand, as a pre-requisite to being hired.) That's more likely to be a rabbit trail, which frees up a tech support line and engineer. There's no silver bullet, unfortunately. You just need to start eliminating possibilities, starting with the most likely and followed by the simple-stupid things like even patch cords. HTH Thanks, Saturday, April 23, 2005, 1:40:53 AM, Kyle Fisher [EMAIL PROTECTED] wrote: KF Ok thanks John. Why do you think this just started happening KF the past 3 days I went from about 200 spool files to 1000 during KF the day and then 2 days later there are all of those left over KF files. KF KF Do you mean the SMTP session from the client. I have had KF some complaints (for about two weeks) from clients (connected by KF T1) saying they are getting SMTP errors occasionally. They have KF there client set to check mail every 5 minutes and throughout the KF day they get SMTP connection errors. KF KF I mean I really dont know I am just searching at this point, but thanks for the info KF KF Kyle KF KF From: [EMAIL PROTECTED] KF [mailto:[EMAIL PROTECTED] On Behalf Of John KF Tolmachoff (Lists) KF Sent: Saturday, April 23, 2005 12:28 AM KF To:Declude.JunkMail@declude.com KF Subject: RE: [Declude.JunkMail] SMD Files KF KF T files are incomplete Q files, where by some how the SMTP KF session was not completed. They along with the associated D file KF can be deleted. The reason it looks like they have already been KF sent is that the sending server/user upon disconnection of the KF SMTP session the resent the message in full. KF KF John T KF eServices For You KF KF -Original Message- KF From: [EMAIL PROTECTED] KF [mailto:[EMAIL PROTECTED] On Behalf Of Kyle KF Fisher KF Sent: Friday, April 22, 2005 2:49 PM KF To:Declude.JunkMail@declude.com KF Subject: RE: [Declude.JunkMail] SMD Files KF KF Looking at some of these it looks like they have already been KF sent and it is trying to resend them again. Also in some of these KF it is going to [EMAIL PROTECTED] KF KF From: [EMAIL PROTECTED] KF [mailto:[EMAIL PROTECTED] On Behalf Of Kyle KF Fisher KF Sent: Friday, April 22, 2005 3:50 PM KF To:Declude.JunkMail@declude.com KF Subject: [Declude.JunkMail] SMD Files KF KF I am trying to find the article that explains the build up of KF Txx.smd and Dxx.smd files in the spool directory. The KF past few days I have quite a few of these hanging around in the KF spool directory. KF KF Here is a sample of whats in the files. Some are from my KF local clients and some or from other mail servers. KF KF Kyle KF KF Imail 8.15 KF 2.0.6 Junkmail and Antivirus KF 3.16b F-Prot KF Message Sniffer 2.3 KF KF D03bc03690136cf5a.SMD KF KF Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP KF (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 KF KF KF T03bc03690136cf5a.SMD KF KF QD:\IMail\spool\D03bc03690136cf5a.SMD KF Hesc5.net KF I03bc03690136cf5a KF X1 KF WE:\IMail KF E0, KF R[EMAIL PROTECTED] KF S[EMAIL PROTECTED] KF NRCPT TO: [EMAIL PROTECTED] KF R[EMAIL PROTECTED] KF Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SMD Files
Title: Message Thanks to help me. Greetings of Bolivia - Original Message - From: Adolfo Justiniano To: Declude.JunkMail@declude.com Sent: Friday, April 22, 2005 7:38 PM Subject: RE: [Declude.JunkMail] SMD Files Hello Julio, Before version 2 messages held by the hold action were placed in the spam folder underspool. Since version 2 you could specify the path using HOLD [path], you could even specify the date: HOLD %DATE% or both HOLD [Path]%DATE% Thank you Sandy for correcting him, I believe it was his first post. Julio is an old friend who manages the serversof a local University (Santa Cruz, Bolivia) Adolfo JustinianoSanta Cruz BBSe-mail: [EMAIL PROTECTED]http://www.scbbs.net -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Julio Cesar PorcelSent: Friday, April 22, 2005 6:15 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] SMD Files Hello As they estan somebody that could help me. Need some commando just as VIRDIR of Declude antivirus in Junkmail - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, April 22, 2005 5:49 PM Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle FisherSent: Friday, April 22, 2005 3:50 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
Re: [Declude.JunkMail] SMD Files
Not saying this is your problem - but... If you have applied the KB 893066 patch from the latest round of MS Patches you may want to look into that. We have seen substantial issues with this patch internally and externally. Darrell --- invURIBL - Intelligent URI filtering plug-in for Declude. Stops 85% of theSPAM with the default configuration. Try it for free - http://www.invariantsystems.com - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Saturday, April 23, 2005 2:40 AM Subject: RE: [Declude.JunkMail] SMD Files Ok thanks John. Why do you think this just started happening the past 3 days I went from about 200 spool files to 1000 during the day and then 2 days later there are all of those left over files. Do you mean the SMTP session from the client. I have had some complaints (for about two weeks) from clients (connected by T1) saying they are getting SMTP errors occasionally. They have there client set to check mail every 5 minutes and throughout the day they get SMTP connection errors. I mean I really dont know I am just searching at this point, but thanks for the info Kyle From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)Sent: Saturday, April 23, 2005 12:28 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] SMD Files T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle FisherSent: Friday, April 22, 2005 2:49 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle FisherSent: Friday, April 22, 2005 3:50 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
RE: [Declude.JunkMail] SMD Files
Darrell, Did you prior adjust your TcpWindowSize value? Keith -Original Message- From: [EMAIL PROTECTED] on behalf of Darrell ([EMAIL PROTECTED]) Sent: Sat 4/23/2005 10:30 AM To: Declude.JunkMail@declude.com Cc: Subject: Re: [Declude.JunkMail] SMD Files Not saying this is your problem - but... If you have applied the KB 893066 patch from the latest round of MS Patches you may want to look into that. We have seen substantial issues with this patch internally and externally. Darrell --- invURIBL - Intelligent URI filtering plug-in for Declude. Stops 85% of the SPAM with the default configuration. Try it for free - http://www.invariantsystems.com - Original Message - From: Kyle Fisher mailto:[EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, April 23, 2005 2:40 AM Subject: RE: [Declude.JunkMail] SMD Files Ok thanks John. Why do you think this just started happening the past 3 days I went from about 200 spool files to 1000 during the day and then 2 days later there are all of those left over files. Do you mean the SMTP session from the client. I have had some complaints (for about two weeks) from clients (connected by T1) saying they are getting SMTP errors occasionally. They have there client set to check mail every 5 minutes and throughout the day they get SMTP connection errors. I mean I really dont know I am just searching at this point, but thanks for the info Kyle _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, April 23, 2005 12:28 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 2:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 3:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] winmail.dat
Re: [Declude.JunkMail] SMD Files
No, we did not have the window size adjusted. FWIW - We had issues on both 2K3 and 2K - keeping in mind that the window size on 2k3 was not adjusted with this patch. My understanding is that the issue with the patch relates to not handling pmtu correctly. Darrell Keith Johnson writes: Darrell, Did you prior adjust your TcpWindowSize value? Keith -Original Message- From: [EMAIL PROTECTED] on behalf of Darrell ([EMAIL PROTECTED]) Sent: Sat 4/23/2005 10:30 AM To: Declude.JunkMail@declude.com Cc: Subject: Re: [Declude.JunkMail] SMD Files Not saying this is your problem - but... If you have applied the KB 893066 patch from the latest round of MS Patches you may want to look into that. We have seen substantial issues with this patch internally and externally. Darrell --- invURIBL - Intelligent URI filtering plug-in for Declude. Stops 85% of the SPAM with the default configuration. Try it for free - http://www.invariantsystems.com - Original Message - From: Kyle Fisher mailto:[EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, April 23, 2005 2:40 AM Subject: RE: [Declude.JunkMail] SMD Files Ok thanks John. Why do you think this just started happening the past 3 days I went from about 200 spool files to 1000 during the day and then 2 days later there are all of those left over files. Do you mean the SMTP session from the client. I have had some complaints (for about two weeks) from clients (connected by T1) saying they are getting SMTP errors occasionally. They have there client set to check mail every 5 minutes and throughout the day they get SMTP connection errors. I mean I really dont know I am just searching at this point, but thanks for the info Kyle _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, April 23, 2005 12:28 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 2:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 3:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SMD Files
Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 3:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
RE: [Declude.JunkMail] SMD Files
Title: Message Hello Julio, Before version 2 messages held by the hold action were placed in the spam folder underspool. Since version 2 you could specify the path using HOLD [path], you could even specify the date: HOLD %DATE% or both HOLD [Path]%DATE% Thank you Sandy for correcting him, I believe it was his first post. Julio is an old friend who manages the serversof a local University (Santa Cruz, Bolivia) Adolfo JustinianoSanta Cruz BBSe-mail: [EMAIL PROTECTED]http://www.scbbs.net -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Julio Cesar PorcelSent: Friday, April 22, 2005 6:15 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] SMD Files Hello As they estan somebody that could help me. Need some commando just as VIRDIR of Declude antivirus in Junkmail - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, April 22, 2005 5:49 PM Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle FisherSent: Friday, April 22, 2005 3:50 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
Re: [Declude.JunkMail] SMD Files
Hello As they estan somebody that could help me. Need some commando just as VIRDIR of Declude antivirus in Junkmail - Original Message - From: Kyle Fisher To: Declude.JunkMail@declude.com Sent: Friday, April 22, 2005 5:49 PM Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle FisherSent: Friday, April 22, 2005 3:50 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
RE: [Declude.JunkMail] SMD Files
T files are incomplete Q files, where by some how the SMTP session was not completed. They along with the associated D file can be deleted. The reason it looks like they have already been sent is that the sending server/user upon disconnection of the SMTP session the resent the message in full. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 2:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] SMD Files Looking at some of these it looks like they have already been sent and it is trying to resend them again. Also in some of these it is going to [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher Sent: Friday, April 22, 2005 3:50 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] SMD Files I am trying to find the article that explains the build up of Txx.smd and Dxx.smd files in the spool directory. The past few days I have quite a few of these hanging around in the spool directory. Here is a sample of whats in the files. Some are from my local clients and some or from other mail servers. Kyle Imail 8.15 2.0.6 Junkmail and Antivirus 3.16b F-Prot Message Sniffer 2.3 D03bc03690136cf5a.SMD Received: from gwmsrm42 [172.16.52.2] by esc5.net with ESMTP (SMTPD32-8.15) id A3BC3690136; Thu, 21 Apr 2005 14:49:16 -0500 T03bc03690136cf5a.SMD QD:\IMail\spool\D03bc03690136cf5a.SMD Hesc5.net I03bc03690136cf5a X1 WE:\IMail E0, R[EMAIL PROTECTED] S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED]
