Thanks for the quick reply. The message I'm concerned with is process E9380148 and it just appears to stop with no more entries right at the point of those mx failure entries.
The catch here is that you are just looking at the SMTPD entries (the process identifier changes for the SMTP or SMTP- entries), which won't show the E-mail being delivered.
What you need to do is look at the last SMTPD entry, the one with the filename ("d:\IMAIL\spool\D5ec1e938014870fd.SMD"). Then, you need to search for the filename minus the path, first character, and extension. So in this case, you would use "5ec1e938014870fd" (you can use this to search the IMail and/or Declude log files to find references to the E-mail). There should be "SMTP" or "SMTP-" entries in the IMail SMTP log file (unless it was blocked by Declude JunkMail -- in that case, "5ec1e938014870fd" should appear in the Declude JunkMail log file, explaining what happened).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
