Nope, no c:\declude.gpx files, I looked for those first. And I agree with your conclusion about what happened, I just wish I had looked at the task manager to see if there were a boatload of smtp32.exe processes sitting in limbo. I'll bet there were.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, 22 January 2003 1:38 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] scanning timeout value >Yes, IMail was processing mail through that period. We started receiving >messages at our desktops that did not contain any declude headers, and that >was my first indication that something was wrong. The log even shows SMTP >refusals based on entries in my kill.lst file, so I'm guessing that IMail >SMTP was up. Do you have a C:\Declude.gp1 or C:\Declude.gp2 file, dated when this happened (or more recent)? >Unfortunately, I bounced the box before I did a whole lot more >investigating at the time, so I don't have much more to go on. I did pull up >the remote administrator and look at the queue, and there were many times >the usual number of items in the "Waiting Items" box, but only a single >message at a time in the "processing items". That's not normal either. What >I failed to do was to pull up the task manager and look at the open >processes before I restarted the machine. My guess here is that IMail's SMTPD process (which listens for incoming E-mail) was working, and placing files in the spool, but never starting Declude (or the SMTP32.exe process that IMail uses to deliver the E-mail after Declude is done). That would account for why there was only 1 E-mail being processed (that would be the "queue run" that runs every 30 minutes or so), and a lot of E-mail in the spool. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
