How many E-mails do you send/receive per day on this server?
We average 800 a day
That's your problem. Your debug log file shows 52 E-mails/minute, and the
previous standard log file showed 266 E-mails per minute.
You're dealing with a load about 300 times your normal volume.
Check the E-mail
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, October 29, 2003 10:01 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] containing the Unknown Virus
Hello,
My answers are below for your review...
Thanks,
CM
>W
What happens over time that there is so many "declude.exe" processes running
that it causes iMail to stop receiving email. Is there anything on the
server that we should check for settings? This is really a painful issue,
and I appreciate everyone's help.
You need to answer the proper questions.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff
(Lists)
Sent: Wednesday, October 29, 2003 12:05 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] containing the Unknown Virus
10/28/2003 23:30:36 Q5532251336c 1 [1 of 2 not deleted
riginal Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, October 29, 2003 7:25 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] containing the Unknown Virus
>Attached is the file for your review - we ran declude for about 2 min.
Attached is the file for your review - we ran declude for about 2 min. It
almost crashed the iMail server.
What do you mean by "it almost crashed the IMail server"? How many E-mails
do you send/receive per day on this server?
> 10/28/2003 23:30:36 Q5532251336c 1 [1 of 2 not deleted] files were
10/28/2003 23:30:36 Q5532251336c 1 [1 of 2 not deleted] files were deleted.
Use ONACCESS ON if you use an external ("on access") virus scanner.
10/28/2003 23:30:36 Q553232c3244 1 [1 of 2 not deleted] files were deleted.
Use ONACCESS ON if you use an external ("on access") virus scanner.
10/28/2003
PROTECTED]
Subject: RE: [Declude.Virus] containing the Unknown Virus
In the virus.cfg file, near the top, there is a line like this:
LOGLEVEL LOW
Change that to LOGLEVEL DEBUG.
Let it run for a bit and then change back.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
> -Origi
.Virus-
> [EMAIL PROTECTED] On Behalf Of Web Administrator
> Sent: Tuesday, October 28, 2003 8:08 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] containing the Unknown Virus
>
> Thanks for your help John. How do we put the log into debug mode?
>
> Regards,
&
nistrator
> Sent: Tuesday, October 28, 2003 6:38 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] containing the Unknown Virus
>
> My apologies, I copied the wrong file. The correct file is attached.
>
> Regards,
> CM
>
> -Original Message-
>
ent: Tuesday, October 28, 2003 6:38 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] containing the Unknown Virus
>
> My apologies, I copied the wrong file. The correct file is attached.
>
> Regards,
> CM
>
> -Original Message-
> From: [EMAIL PROTECTED
PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of Web Administrator
> Sent: Tuesday, October 28, 2003 5:24 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] containing the Unknown Virus
>
> Hello Scott,
>
> We made those changes to the cfg, and the sam
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] containing the Unknown Virus
>
> Hello Scott,
>
> We made those changes to the cfg, and the same issue happens again...
>
> -CM
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMA
ude.Virus-
> [EMAIL PROTECTED] On Behalf Of Web Administrator
> Sent: Tuesday, October 28, 2003 5:24 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] containing the Unknown Virus
>
> Hello Scott,
>
> We made those changes to the cfg, and the same issue happens aga
Scott,
Attached is the log file from today for your review...
Thanks,
CM
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, October 28, 2003 8:36 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] containing the Unknown
We made those changes to the cfg, and the same issue happens again...
That means that you had more than one problem before. What exactly does
the SCANFILE line look like now?
What warnings/errors appear in the \IMail\spool\vir.log file?
-S
Is this true for the DOS version of f-prot too?
F-Prot.exe (the 16-bit program which comes with both the DOS and Windows
version of F-Prot) requires the /NOFLOPPY and /NOBOOT switches.
fpcmd.exe (the 32-bit program which just comes with the Windows version of
F-Prot) should not use /NOFLOPPY or
Is this true for the DOS version of f-prot too?
~Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Tuesday, October 28, 2003 6:50 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] containing the Unknown Virus
>Thanks for
Hello Scott,
We made those changes to the cfg, and the same issue happens again...
-CM
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, October 28, 2003 7:50 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] containing
Thanks for the help. I have included those files, plus the declude.log
file. I look forward to hearing from you.
The problem is here:
SCANFILED:\FSI\F-Prot\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE
/NOFLOPPY /NOBOOT /DUMB /REPORT=report.txt
This line should be changed to:
SCANFILE
]
Subject: RE: [Declude.Virus] containing the Unknown Virus
Not sure if Scott is still around, so if you want, do the following:
Go to command prompt:
Change to the Imail directory.
Type exactly without the quotes, "Declude -daig >c:\declude.txt"
Send that file along with your virus.cf
We have re-installed F-Prot and we continue to have the same issue. We
execute declude.exe and restart SMTP service - once we do that we get a ton
of unknown virus alerts and in the system process there is about 20
declude.exe running. What could be causing this?
What does the Declude Virus log
PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.Virus] containing the Unknown Virus
>
> Hi Scott,
>
> We have re-installed F-Prot and we continue to have the same issue. We
> execute declude.exe and restart SMTP service - once we do that we get a
> ton
> of unknown v
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, October 28, 2003 7:39 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] containing the Unknown Virus
>We are getting this issue again, but now my customers receive "you
PROTECTED] On Behalf Of R. Scott Perry
Sent: Monday, October 20, 2003 5:36 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] containing the Unknown Virus
> > >10/20/2003 16:20:16 Q437f01e800a28cd0 1 [1 of 2 not deleted] files
> > >were deleted; assuming external virus sca
]
Subject: RE: [Declude.Virus] containing the Unknown Virus
>10/20/2003 16:20:16 Q437f01e800a28cd0 1 [1 of 2 not deleted] files were
>deleted; assuming external virus scanner found a virus 10/20/2003
>16:20:16 Q437f01e800a28cd0 File(s) are INFECTED [13] 10/20/2003
>16:20:16 Q437f
> >10/20/2003 16:20:16 Q437f01e800a28cd0 1 [1 of 2 not deleted] files were
> >deleted; assuming external virus scanner found a virus 10/20/2003
> That's because you are still using the ONACCESS ON setting. If you use
the
> ONACCESS ON setting and have a virus scanner that doesn't save all the
>
10/20/2003 16:20:16 Q437f01e800a28cd0 1 [1 of 2 not deleted] files were
deleted; assuming external virus scanner found a virus
10/20/2003 16:20:16 Q437f01e800a28cd0 File(s) are INFECTED [13]
10/20/2003 16:20:16 Q437f01e800a28cd0 Scanned: CONTAINS A VIRUS [MIME: 2591]
That's because you are still u
28 matches
Mail list logo
