So we've run into one big problem with this process: It takes a long time to process one message. The process doesn't seem to work from any directory except the imail spool directory (held spam gets moved to a spam/ subdirectory of wherever the message was originally, but legitimate email that passes WEIGHT15 (where we'd hold) doesn't end up getting sent; Imail bounces it with a status of 2. If I run the script from the imail\spool directory, all is well and legit mail goes out and spam gets held in spool\spam.
The problem is that anything in imail\spool is susceptible to being sent out by the queue manager whenever it re-processes the spool... So I had to abort the process after a few hundred messages to keep the queue manager from just delivering all the mail (some largish percentage of which is legitimate spam and shouldn't go out). Any ideas about why the process takes so long (~20-30 seconds per message)? Obviously in the normal course of things we don't see any huge delay, but we only process a few thousand messages per day (I tried to move ~2000 Q* and D* files, presumably ~1000 messages back to imail\spool and process them with the batch file). Any insight? Anyone else tried to rescan messages this way? -Scott > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of McCool, Scott > Sent: Wednesday, March 17, 2004 2:05 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Force resend and rescan of a > message that was held? > > > > Scott (and anyone else who might have to do this in the future), > > Thank you for the quick response. What we ended up doing was the > following: > > -Move the last couple days of possibly affected messages back > to d:\imail\spool from d:\imail\spool\spam -Create a short > batch script, whose main line was: > @for %%? in (d:\imail\spool\q*.smd) do call > d:\imail\declude.exe %%? >> rescan_spam.txt -Run this script, > observe that messages which no longer fail WEIGHT15 are sent > out properly and messages which fail WEIGHT15 still are moved > back to d:\imail\spool\spam. > > This has seemed to work well on a small batch of test > messages, so we'll likely rescan the bulk of the mail shortly > (I want to do a little more > testing) > > Thank you again for the prompt & helpful response! > > -Scott > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of R. > > Scott Perry > > Sent: Wednesday, March 17, 2004 12:29 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] Force resend and rescan of a > > message that was held? > > > > > > > > > >From testing so far, it appears Declude won't rescan a > > message. I've > > >tried deleting the headers from the D* file before putting > > it back in > > >the queue to no avail. If I set the declude log level to > > "HIGH" I see > > >"Passing to SMTP1" for that message ID, so it at least appears that > > >declude sees the message again. > > > > > >How can I have messages rescanned? > > > > Declude JunkMail will automatically skip over E-mails that > are in the > > spool, since they have already been scanned. > > > > If you want to have Declude scan them again, it would get a bit > > tricky. You would need to call Declude for each E-mail, but > > do so before > > IMail delivered it. So you might try copying batches of > > perhaps 10-20 > > E-mails back to the spool, call Declude for each one > > ("C:\IMail\Declude.exe > > C:\IMail\spool\Q1234567.SMD"), wait until they are processed, and > > repeat. I'm not sure of an easy automated way to do this. > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail > > mailservers > > since 2000. > > Declude Virus: Ultra reliable virus detection and the leader > > in mailserver > > vulnerability detection. > > Find out what you've been missing: Ask for a free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be > > found at http://www.mail-archive.com. > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
