Re: [Declude.JunkMail] multiple simultaneous problems

2008-03-01 Thread Darrell ([EMAIL PROTECTED])
Check the IMAP logs of recent compared to some of the older ones.  We 
should rule out that someone is not hitting you with excessive 
connections etc.  A couple weeks ago one of my systems started having 
problems with the POP3 service being slow or timing out.  It turned out 
someone was running an automated tool to try and crack accounts/passwords.


Darrell
--
Check out http://www.invariantsystems.com for utilities for Declude, 
Imail, mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, 
SURBL/URI integration, MRTG Integration, and Log Parsers.



David Dodell wrote:

-Original Message-
From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]>



Which RBL's are timing out?  Is your DNS server having problems?  Is 



your DNS server local to the mail server or is it located somewhere else?




It is totally random ... sometimes none of them for several messages, other 
times, the first several work, and the rest fail ... doesn't seem to be any 
pattern




(3) IMAP4d32.exe  services are running 99% of the cpu time ...


This will essentially starve out Declude and anything else.  I have seen 


several folks have this issue on the Imail list.  What version of Imail 



are you using?




9.23 since it was released ... been running it for a while.



Any thoughts on where to start ... I've rebooted, stopped services, 


restarted services ... works fine for about 8 hrs then starts up all 



over again





I would start with the IMAP4D issue.






Darrell, I agree ... just wish I knew what was affecting it.



Another response suggested the file system ... and I noticed the comment from 
the Sniffer people about NTFS.



We have had some bad sectors on our hard drive starting about a few weeks ago 
... Ran chkdsk etc and that seemed to have caught them, ran a defrag session 
today ...

I order today a new Barracuda ES2 drive for the server, which will arrive 
Monday and I'll attempt to clone.



Linda @ Declude suggested I might be having a bad network card go bad, which 
she thinks is attributing to the failed RBL issues, but I don't think that 
would affect the IMAP usage.



Short of installing a new network card / drive ... any other thoughts what to 
try?



David


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.


--



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread Brian Milburn


It might help to open task manager and reduce the service priority for 
the time being to give you a little more breathing room until you get 
the problem sorted out.


Brian

David Dodell wrote:

-Original Message-
From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]>

>Which RBL's are timing out?  Is your DNS server having problems?  Is 


>your DNS server local to the mail server or is it located somewhere else?



It is totally random ... sometimes none of them for several messages, other 
times, the first several work, and the rest fail ... doesn't seem to be any 
pattern



> (3) IMAP4d32.exe  services are running 99% of the cpu time ...

> This will essentially starve out Declude and anything else.  I have seen 

>several folks have this issue on the Imail list.  What version of Imail 


>are you using?



9.23 since it was released ... been running it for a while.



> Any thoughts on where to start ... I've rebooted, stopped services, 

> restarted services ... works fine for about 8 hrs then starts up all 


> over again



>I would start with the IMAP4D issue.





Darrell, I agree ... just wish I knew what was affecting it.



Another response suggested the file system ... and I noticed the comment from 
the Sniffer people about NTFS.



We have had some bad sectors on our hard drive starting about a few weeks ago 
... Ran chkdsk etc and that seemed to have caught them, ran a defrag session 
today ...

I order today a new Barracuda ES2 drive for the server, which will arrive 
Monday and I'll attempt to clone.



Linda @ Declude suggested I might be having a bad network card go bad, which 
she thinks is attributing to the failed RBL issues, but I don't think that 
would affect the IMAP usage.



Short of installing a new network card / drive ... any other thoughts what to 
try?



David

  


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread David Dodell
-Original Message-
From: "Darrell ([EMAIL PROTECTED])" <[EMAIL PROTECTED]>
>Which RBL's are timing out?  Is your DNS server having problems?  Is 
>your DNS server local to the mail server or is it located somewhere else?
It is totally random ... sometimes none of them for several messages, other 
times, the first several work, and the rest fail ... doesn't seem to be any 
pattern
> (3) IMAP4d32.exe  services are running 99% of the cpu time ...
> This will essentially starve out Declude and anything else.  I have seen 
>several folks have this issue on the Imail list.  What version of Imail 
>are you using?
9.23 since it was released ... been running it for a while.
> Any thoughts on where to start ... I've rebooted, stopped services, 
> restarted services ... works fine for about 8 hrs then starts up all 
> over again
>I would start with the IMAP4D issue.
Darrell, I agree ... just wish I knew what was affecting it.
Another response suggested the file system ... and I noticed the comment from 
the Sniffer people about NTFS.
We have had some bad sectors on our hard drive starting about a few weeks ago 
... Ran chkdsk etc and that seemed to have caught them, ran a defrag session 
today ...
I order today a new Barracuda ES2 drive for the server, which will arrive 
Monday and I'll attempt to clone.
Linda @ Declude suggested I might be having a bad network card go bad, which 
she thinks is attributing to the failed RBL issues, but I don't think that 
would affect the IMAP usage.
Short of installing a new network card / drive ... any other thoughts what to 
try?
David

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread Darrell ([EMAIL PROTECTED])

David,

Comment's inline

(2) Declude is failing to make connections on RBL tests about 10 to 20% 
of the time.   Running in debug mode will show one message running 
against multiple DBL tests, and then the message will show the first 5 
DBL tests running, and the rest fail with "no connection"


Which RBL's are timing out?  Is your DNS server having problems?  Is 
your DNS server local to the mail server or is it located somewhere else?



(3) IMAP4d32.exe  services are running 99% of the cpu time ...


This will essentially starve out Declude and anything else.  I have seen 
several folks have this issue on the Imail list.  What version of Imail 
are you using?



(4) Multiple instances of the sniffer exe program


This is normal - on my server with a decent volume its not uncommon to 
see 20-30 sniffer's running at the same time.  It all depends on how 
many threads you are running.


Any thoughts on where to start ... I've rebooted, stopped services, 
restarted services ... works fine for about 8 hrs then starts up all 
over again


I would start with the IMAP4D issue.

Darrell

--
Check out http://www.invariantsystems.com for utilities for Declude, 
Imail, mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, 
SURBL/URI integration, MRTG Integration, and Log Parsers.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread David Dodell


On Feb 29, 2008, at 1:38 AM, John T wrote:


1) Are they just q files or d files or both?


Both, 13000 files this morning from overnight total


.2) Tripple check the DNS server(s) being used for problems.



I have, plus we tried an external DNS and same issue.

3) Do you have a lot of large mailboxes? Has the amount of email  
flowing in increased?




Nope ... maybe a total of 100 active mailboxes ...

4) Review information on the Sniffer list about updating to the new  
service model.




I should be on the latest version of Sniffer ... just renewed my  
contract ... haven't made any changes to the configuration in months.



Also, what version of Imail, what version of Declude?



9.23 imail ... was running the latest release of Declude ... declude  
moved me to the latest beta yesterday.



Woke up and checked ... IMAP4d32 is running at 90+ % of the CPU still.

There are multiple instances of the bcl*.exe   (my sniffer)  
running ... probably 30 or 40 copies open in the processes.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread John T
1) Are they just q files or d files or both?
2) Tripple check the DNS server(s) being used for problems.
3) Do you have a lot of large mailboxes? Has the amount of email flowing in 
increased?
4) Review information on the Sniffer list about updating to the new service 
model.
Also, what version of Imail, what version of Declude?John T
eServices For You
-Original Message-
From: "David Dodell" <[EMAIL PROTECTED]>
Sent 2/28/2008 9:10:02 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] multiple simultaneous problemsAfter running Declude 
/ Imail smoothly for years ... the last few days
have been the pits
(1) Multiple files showing up in the /spool/proc directory and not
leaving
(2) Declude is failing to make connections on RBL tests about 10 to
20% of the time.   Running in debug mode will show one message running
against multiple DBL tests, and then the message will show the first 5
DBL tests running, and the rest fail with "no connection"
(3) IMAP4d32.exe  services are running 99% of the cpu time ...
(4) Multiple instances of the sniffer exe program
Any thoughts on where to start ... I've rebooted, stopped services,
restarted services ... works fine for about 8 hrs then starts up all
over again
David
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.