RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server

2006-03-21 Thread Grant Griffith
Kami,

Thanks for the info, but this is a separate issue as these have no HTML in
them.  There is also nothing in the Declude logs for these messages.  I am
not positive it is Declude, but I have not had an issue since I disabled
Declude Virus on Friday afternoon, so it is looking more and more like it
could be.

Thanks,
Grant Griffith
Web Application Developer
Enhanced Telecommunications Corp.
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan
Sent: Monday, March 20, 2006 6:45 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send
Messages From Web Server

Hi Grant..

The problem is an issue we faced with as well.

If you are sending HTML with fancy tags your emails are getting tagged as:

-Virus:  Possibly a new variant of JS/
-In: [HTML segment]

We had all of our web messaging emails get caught as that virus.  I changed
the program to simply send an HTML without any tags other than  for line
break and it worked fine.

We use ASPemail for 1 application and the problem started happening almost 2
or so weeks ago.

All is fine now.

Hope this helps.

Kami

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Monday, March 20, 2006 10:36 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send
Messages From Web Server

I will get a support ticket open with Declude, but just as an FYI, I
disabled Declude Virus last Friday and have not seen this issue again since.
Therefore it appears Declude Virus might be taking the message and then
timing out for some reason.  I am still watching all the emails coming from
my web server, but the past 20+ have went thru fine since disabling Declude
Virus.

Thanks,
Grant Griffith
Web Application Developer
Enhanced Telecommunications Corp.
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Friday, March 17, 2006 1:39 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send
Messages From Web Server



Well, I do have Declude running with F-Prot.  I just checked those logs and
there is nothing in there for that message which is really odd...  Maybe
this is a Declude Issue now?!?!

Thanks,
Grant Griffith
Web Application Developer
Enhanced Telecommunications Corp.
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack
Sent: Friday, March 17, 2006 1:22 PM
To: Grant Griffith - IMail
Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web
Server


GGI> Well, here is the ASPMail log for an email that did not go out and 
GGI> then below it is the Imail logs showing it timing out...

As the session in the ASP-Mail log is completed without problems - and the
session in the Imail log is not, there must be some proxy (or Virusscanner,
ASSP etc.) between the both.
The "250" and "221" messages are created by the recieving SMTP-Server.
I assume it is a virusscanner, which stops sending on the message during the
scan...

Just an Idea. Maybe I am wrong...
 Matti
 

 

GGI> 

GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1

GGI> HELO mail.ei8htlegs.net

GGI> 250 hello ei8htlegs.net

GGI> MAIL FROM:<[EMAIL PROTECTED]>

GGI> 250 ok

GGI> RCPT TO:<[EMAIL PROTECTED]>

GGI> 250 ok its for <[EMAIL PROTECTED]>

GGI> RCPT TO:<[EMAIL PROTECTED]>

GGI> 250 ok its for <[EMAIL PROTECTED]>

GGI> DATA

GGI> 354 Please start mail input.

GGI> Message body suppressed.

 

GGI> .

GGI> 250 Mail queued for delivery.

GGI> QUIT

GGI> 221 Closing connection. Good bye.

GGI> 

 

GGI> 

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.60] connect 
GGI> 64.184.24.36 port
GGI> 2919

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] HELO 
GGI> mail.ei8htlegs.net

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL 
GGI> FROM:<[EMAIL PROTECTED]>

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT 
GGI> TO:<[EMAIL PROTECTED]>

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT 
GGI> TO:<[EMAIL PROTECTED]>

GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out

GGI> 

 

GGI> Thanks,

GGI> Grant Griffith

GGI> Web Application Developer

GGI> Enhanced Telecommunications Corp.

GGI> (812)932-1000

 

GGI> -Original Message-
GGI> From: [EMAIL PROTECTED]
GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Grant 
GGI> Griffith - IMail
GGI> Sent: Tuesday, March 14, 2006 10:49 AM
GGI> To: Imail_Forum@list.ipswitch.com
GGI> Subject: RE: [IMail Forum] Issues Using IMail
GGI> 8.22 To Send Messages From Web
GGI> Server

 

RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server

2006-03-20 Thread Kami Razvan
Hi Grant..

The problem is an issue we faced with as well.

If you are sending HTML with fancy tags your emails are getting tagged as:

-Virus:  Possibly a new variant of JS/
-In: [HTML segment]

We had all of our web messaging emails get caught as that virus.  I changed
the program to simply send an HTML without any tags other than  for line
break and it worked fine.

We use ASPemail for 1 application and the problem started happening almost 2
or so weeks ago.

All is fine now.

Hope this helps.

Kami

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Monday, March 20, 2006 10:36 AM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send
Messages From Web Server

I will get a support ticket open with Declude, but just as an FYI, I
disabled Declude Virus last Friday and have not seen this issue again since.
Therefore it appears Declude Virus might be taking the message and then
timing out for some reason.  I am still watching all the emails coming from
my web server, but the past 20+ have went thru fine since disabling Declude
Virus.

Thanks,
Grant Griffith
Web Application Developer
Enhanced Telecommunications Corp.
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Friday, March 17, 2006 1:39 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send
Messages From Web Server



Well, I do have Declude running with F-Prot.  I just checked those logs and
there is nothing in there for that message which is really odd...  Maybe
this is a Declude Issue now?!?!

Thanks,
Grant Griffith
Web Application Developer
Enhanced Telecommunications Corp.
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack
Sent: Friday, March 17, 2006 1:22 PM
To: Grant Griffith - IMail
Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web
Server


GGI> Well, here is the ASPMail log for an email that did not go out and 
GGI> then below it is the Imail logs showing it timing out...

As the session in the ASP-Mail log is completed without problems - and the
session in the Imail log is not, there must be some proxy (or Virusscanner,
ASSP etc.) between the both.
The "250" and "221" messages are created by the recieving SMTP-Server.
I assume it is a virusscanner, which stops sending on the message during the
scan...

Just an Idea. Maybe I am wrong...
 Matti
 

 

GGI> 

GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1

GGI> HELO mail.ei8htlegs.net

GGI> 250 hello ei8htlegs.net

GGI> MAIL FROM:<[EMAIL PROTECTED]>

GGI> 250 ok

GGI> RCPT TO:<[EMAIL PROTECTED]>

GGI> 250 ok its for <[EMAIL PROTECTED]>

GGI> RCPT TO:<[EMAIL PROTECTED]>

GGI> 250 ok its for <[EMAIL PROTECTED]>

GGI> DATA

GGI> 354 Please start mail input.

GGI> Message body suppressed.

 

GGI> .

GGI> 250 Mail queued for delivery.

GGI> QUIT

GGI> 221 Closing connection. Good bye.

GGI> 

 

GGI> 

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.60] connect 
GGI> 64.184.24.36 port
GGI> 2919

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] HELO 
GGI> mail.ei8htlegs.net

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL 
GGI> FROM:<[EMAIL PROTECTED]>

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT 
GGI> TO:<[EMAIL PROTECTED]>

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT 
GGI> TO:<[EMAIL PROTECTED]>

GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out

GGI> 

 

GGI> Thanks,

GGI> Grant Griffith

GGI> Web Application Developer

GGI> Enhanced Telecommunications Corp.

GGI> (812)932-1000

 

GGI> -Original Message-
GGI> From: [EMAIL PROTECTED]
GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Grant 
GGI> Griffith - IMail
GGI> Sent: Tuesday, March 14, 2006 10:49 AM
GGI> To: Imail_Forum@list.ipswitch.com
GGI> Subject: RE: [IMail Forum] Issues Using IMail
GGI> 8.22 To Send Messages From Web
GGI> Server

 

GGI> OK, I have logging turned on now for the ASPMail side of things.  
GGI> Just have

GGI> to watch for it to occur again and then look at what both sides said.

 

GGI> Thanks,

GGI> Grant Griffith

GGI> Web Application Developer

GGI> Enhanced Telecommunications Corp.

GGI> (812)932-1000

 

GGI> -Original Message-

GGI> From: [EMAIL PROTECTED]

GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Eric 
GGI> Shanbrom

GGI> Sent: Tuesday, March 14, 2006 10:41 AM

GGI> To: Imail_Forum@list.ipswitch.com

GGI> Subject: Re: [IMail Forum] Issues Using IMail
GGI> 8.22 To Send Messages From Web

GGI> Server

 

GGI> You are loo

RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server

2006-03-20 Thread Grant Griffith
I will get a support ticket open with Declude, but just as an FYI, I
disabled Declude Virus last Friday and have not seen this issue again since.
Therefore it appears Declude Virus might be taking the message and then
timing out for some reason.  I am still watching all the emails coming from
my web server, but the past 20+ have went thru fine since disabling Declude
Virus.

Thanks,
Grant Griffith
Web Application Developer
Enhanced Telecommunications Corp.
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
Sent: Friday, March 17, 2006 1:39 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send
Messages From Web Server



Well, I do have Declude running with F-Prot.  I just checked those logs and
there is nothing in there for that message which is really odd...  Maybe
this is a Declude Issue now?!?!

Thanks,
Grant Griffith
Web Application Developer
Enhanced Telecommunications Corp.
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack
Sent: Friday, March 17, 2006 1:22 PM
To: Grant Griffith - IMail
Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web
Server


GGI> Well, here is the ASPMail log for an email that did not go out and then
GGI> below it is the Imail logs showing it timing
GGI> out...

As the session in the ASP-Mail log is completed without
problems - and the session in the Imail log is not, there
must be some proxy (or Virusscanner, ASSP etc.) between the both.
The "250" and "221" messages are created by the recieving
SMTP-Server.
I assume it is a virusscanner, which stops sending on the
message during the scan...

Just an Idea. Maybe I am wrong...
 Matti
 

 

GGI> 

GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1

GGI> HELO mail.ei8htlegs.net

GGI> 250 hello ei8htlegs.net

GGI> MAIL FROM:<[EMAIL PROTECTED]>

GGI> 250 ok

GGI> RCPT TO:<[EMAIL PROTECTED]>

GGI> 250 ok its for <[EMAIL PROTECTED]>

GGI> RCPT TO:<[EMAIL PROTECTED]>

GGI> 250 ok its for <[EMAIL PROTECTED]>

GGI> DATA

GGI> 354 Please start mail input.

GGI> Message body suppressed.

 

GGI> .

GGI> 250 Mail queued for delivery.

GGI> QUIT

GGI> 221 Closing connection. Good bye.

GGI> 

 

GGI> 

GGI> 03:16 20:36 SMTPD(12ab015a43ee)
GGI> [64.184.24.60] connect 64.184.24.36 port
GGI> 2919

GGI> 03:16 20:36 SMTPD(12ab015a43ee)
GGI> [64.184.24.36] HELO mail.ei8htlegs.net

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL
GGI> FROM:<[EMAIL PROTECTED]>

GGI> 03:16 20:36 SMTPD(12ab015a43ee)
GGI> [64.184.24.36] RCPT TO:<[EMAIL PROTECTED]>

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT
GGI> TO:<[EMAIL PROTECTED]>

GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out

GGI> 

 

GGI> Thanks,

GGI> Grant Griffith

GGI> Web Application Developer

GGI> Enhanced Telecommunications Corp.

GGI> (812)932-1000

 

GGI> -Original Message-
GGI> From: [EMAIL PROTECTED]
GGI> [mailto:[EMAIL PROTECTED] On
GGI> Behalf Of Grant Griffith -
GGI> IMail
GGI> Sent: Tuesday, March 14, 2006 10:49 AM
GGI> To: Imail_Forum@list.ipswitch.com
GGI> Subject: RE: [IMail Forum] Issues Using IMail
GGI> 8.22 To Send Messages From Web
GGI> Server

 

GGI> OK, I have logging turned on now for the ASPMail
GGI> side of things.  Just have

GGI> to watch for it to occur again and then look at what both sides said.

 

GGI> Thanks,

GGI> Grant Griffith

GGI> Web Application Developer

GGI> Enhanced Telecommunications Corp.

GGI> (812)932-1000

 

GGI> -Original Message-

GGI> From: [EMAIL PROTECTED]

GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Eric Shanbrom

GGI> Sent: Tuesday, March 14, 2006 10:41 AM

GGI> To: Imail_Forum@list.ipswitch.com

GGI> Subject: Re: [IMail Forum] Issues Using IMail
GGI> 8.22 To Send Messages From Web

GGI> Server

 

GGI> You are looking in the wrong direction. This is a
GGI> message coming into IMail 

GGI> not going out to somewhere else. Since it hasn't
GGI> been accepted for delivery 

GGI> by IMail there is nothing to re-queue and try
GGI> again.. the question here is 

GGI> why didn't the conversation continue after the
GGI> final RCPT TO. Unfortunately,

 

GGI> we only see one side of the communication, that
GGI> being the commands coming 

GGI> in. At this time I do not know if the sending
GGI> server got the final 250 OK 

GGI> and didn't send the DATA command or what. The
GGI> connection timed out while 

GGI> IMail was waiting for a new command. A sniffer on the line can give
more

GGI> info and point you to the problem.

 

GGI> 

RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server

2006-03-17 Thread Grant Griffith


Well, I do have Declude running with F-Prot.  I just checked those logs and
there is nothing in there for that message which is really odd...  Maybe
this is a Declude Issue now?!?!

Thanks,
Grant Griffith
Web Application Developer
Enhanced Telecommunications Corp.
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack
Sent: Friday, March 17, 2006 1:22 PM
To: Grant Griffith - IMail
Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web
Server


GGI> Well, here is the ASPMail log for an email that did not go out and then
GGI> below it is the Imail logs showing it timing
GGI> out...

As the session in the ASP-Mail log is completed without
problems - and the session in the Imail log is not, there
must be some proxy (or Virusscanner, ASSP etc.) between the both.
The "250" and "221" messages are created by the recieving
SMTP-Server.
I assume it is a virusscanner, which stops sending on the
message during the scan...

Just an Idea. Maybe I am wrong...
 Matti
 

 

GGI> 

GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1

GGI> HELO mail.ei8htlegs.net

GGI> 250 hello ei8htlegs.net

GGI> MAIL FROM:<[EMAIL PROTECTED]>

GGI> 250 ok

GGI> RCPT TO:<[EMAIL PROTECTED]>

GGI> 250 ok its for <[EMAIL PROTECTED]>

GGI> RCPT TO:<[EMAIL PROTECTED]>

GGI> 250 ok its for <[EMAIL PROTECTED]>

GGI> DATA

GGI> 354 Please start mail input.

GGI> Message body suppressed.

 

GGI> .

GGI> 250 Mail queued for delivery.

GGI> QUIT

GGI> 221 Closing connection. Good bye.

GGI> 

 

GGI> 

GGI> 03:16 20:36 SMTPD(12ab015a43ee)
GGI> [64.184.24.60] connect 64.184.24.36 port
GGI> 2919

GGI> 03:16 20:36 SMTPD(12ab015a43ee)
GGI> [64.184.24.36] HELO mail.ei8htlegs.net

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL
GGI> FROM:<[EMAIL PROTECTED]>

GGI> 03:16 20:36 SMTPD(12ab015a43ee)
GGI> [64.184.24.36] RCPT TO:<[EMAIL PROTECTED]>

GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT
GGI> TO:<[EMAIL PROTECTED]>

GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out

GGI> 

 

GGI> Thanks,

GGI> Grant Griffith

GGI> Web Application Developer

GGI> Enhanced Telecommunications Corp.

GGI> (812)932-1000

 

GGI> -Original Message-
GGI> From: [EMAIL PROTECTED]
GGI> [mailto:[EMAIL PROTECTED] On
GGI> Behalf Of Grant Griffith -
GGI> IMail
GGI> Sent: Tuesday, March 14, 2006 10:49 AM
GGI> To: Imail_Forum@list.ipswitch.com
GGI> Subject: RE: [IMail Forum] Issues Using IMail
GGI> 8.22 To Send Messages From Web
GGI> Server

 

GGI> OK, I have logging turned on now for the ASPMail
GGI> side of things.  Just have

GGI> to watch for it to occur again and then look at what both sides said.

 

GGI> Thanks,

GGI> Grant Griffith

GGI> Web Application Developer

GGI> Enhanced Telecommunications Corp.

GGI> (812)932-1000

 

GGI> -Original Message-

GGI> From: [EMAIL PROTECTED]

GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Eric Shanbrom

GGI> Sent: Tuesday, March 14, 2006 10:41 AM

GGI> To: Imail_Forum@list.ipswitch.com

GGI> Subject: Re: [IMail Forum] Issues Using IMail
GGI> 8.22 To Send Messages From Web

GGI> Server

 

GGI> You are looking in the wrong direction. This is a
GGI> message coming into IMail 

GGI> not going out to somewhere else. Since it hasn't
GGI> been accepted for delivery 

GGI> by IMail there is nothing to re-queue and try
GGI> again.. the question here is 

GGI> why didn't the conversation continue after the
GGI> final RCPT TO. Unfortunately,

 

GGI> we only see one side of the communication, that
GGI> being the commands coming 

GGI> in. At this time I do not know if the sending
GGI> server got the final 250 OK 

GGI> and didn't send the DATA command or what. The
GGI> connection timed out while 

GGI> IMail was waiting for a new command. A sniffer on the line can give
more

GGI> info and point you to the problem.

 

GGI> Eric S

GGI> - Original Message - 

GGI> From: "Adam Campbell" <[EMAIL PROTECTED]>

GGI> To: 

GGI> Sent: Tuesday, March 14, 2006 10:26 AM

GGI> Subject: Re: [IMail Forum] Issues Using IMail
GGI> 8.22 To Send Messages From Web

 

GGI> Server

 

 

>> There's no DATA command.  Maybe ASPMail didn't like SMTPD's response to

>> the second RCPT TO and didn't give a DATA.

>> 

>> Does ASPMail have a log?

>> 

>> Would verbose logging of SMTPD help?

>> 

>> adamc

>> 

>> Grant Griffith - IMail wrote:

>>> Well, we use ASP and ASP.NET and below are the logs I just tracked of
one

 

>>> email this morning.

>>> 

>>>  03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.60] connect 64.184.24.36

>>> port 1539

>>> 

>>> 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] HELO 

>>> mail.ei8htlegs.net

>>> 

>>> 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] MAIL 

>>> FROM:<[EMAIL PROTECTED]>

>>> 

>>> 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] RCPT 

>>> TO:<[EMAIL PROTECTED]>

>>> 

>>> 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] RCPT 

>>> TO: