Re: CFMail alternative
I've had dozens of reports of missing mail, and it has always come down to something other than CF. The email address was wrong, the SMTP server was down, the domain of the sender had been blacklisted, something along these kind of lines. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010 https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book The best way to predict the future is to help create it On 4/4/2013 5:26 PM, Russ Michaels wrote: This has been reported many times on the forums. You say it has not happened to you, but how would know unless someone actually contacted you to say they had not reveived an email and you investigated it. In most cases of missing email, someone simply resends it and your none the wiser. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 4, 2013 9:48 PM, Steve 'Cutter' Blades cold.fus...@cutterscrossing.com wrote: That is surprising. Thirteen years with CF, from v4 thru 10, and that has never been my experience. It has always come down to the SMTP server, or the recipient, 100% of the time. One environment I ran processed upwards of 800,000 emails a day. When you say there is no record on the mail server, do you mean the recipient server? Or the SMTP server? Is there a spam filtering server in between somewhere? Does your CF server authenticate with your SMTP server on send? What sort of security checks and balances are setup on your SMTP server? If you have an entry in the CF Sent Mail log, then there was a valid handoff of your message to your SMTP server. If the hand off fails, it drops to the Undelivered folder. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010 https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book The best way to predict the future is to help create it On 4/4/2013 12:15 PM, Brian Cain wrote: I have had an ongoing problem with ColdFusion dropping some mail messages. The mail log show the messages being delivered to the mail server, but there is no record on the mail server. I found this thread on Adobe's website (http://forums.adobe.com/thread/585718), but there never seemed to be an actual resolution of the issue. I have tried contacting Adobe support, but that has led to nowhere. Most messages go out, but i need 100% reliability for this. Seeing as the problem is not with the CFMAIL tag, or my mail server (everything worked fine before we migrated to CF9 last year), I need an alternative that will completely bypass the CF engine all together. I was wondering if anyone had any suggestions. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355290 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CFMail alternative
Dozens is literally nothing out of 800k per day. Imagine saying you are aware of every tv show on every channel, every day, how would you know of a glitch or disruption in any of those programmes unless you are watching them all or someone tells you. Even if someone told you about a couple of channels, there are hundreds of others you are still unaware of. The chances of you being aware of or told of every missing email when you send large qualtities is almost impossible. So anyone certainly could have this issue without realising. I am not saying that you do have this issue, simply that you could. If you check the Adobe forums you will see those other reports I mentioned of this same issue. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 5, 2013 11:30 AM, Steve 'Cutter' Blades cold.fus...@cutterscrossing.com wrote: I've had dozens of reports of missing mail, and it has always come down to something other than CF. The email address was wrong, the SMTP server was down, the domain of the sender had been blacklisted, something along these kind of lines. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010 https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book The best way to predict the future is to help create it On 4/4/2013 5:26 PM, Russ Michaels wrote: This has been reported many times on the forums. You say it has not happened to you, but how would know unless someone actually contacted you to say they had not reveived an email and you investigated it. In most cases of missing email, someone simply resends it and your none the wiser. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 4, 2013 9:48 PM, Steve 'Cutter' Blades cold.fus...@cutterscrossing.com wrote: That is surprising. Thirteen years with CF, from v4 thru 10, and that has never been my experience. It has always come down to the SMTP server, or the recipient, 100% of the time. One environment I ran processed upwards of 800,000 emails a day. When you say there is no record on the mail server, do you mean the recipient server? Or the SMTP server? Is there a spam filtering server in between somewhere? Does your CF server authenticate with your SMTP server on send? What sort of security checks and balances are setup on your SMTP server? If you have an entry in the CF Sent Mail log, then there was a valid handoff of your message to your SMTP server. If the hand off fails, it drops to the Undelivered folder. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010 https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book The best way to predict the future is to help create it On 4/4/2013 12:15 PM, Brian Cain wrote: I have had an ongoing problem with ColdFusion dropping some mail messages. The mail log show the messages being delivered to the mail server, but there is no record on the mail server. I found this thread on Adobe's website (http://forums.adobe.com/thread/585718), but there never seemed to be an actual resolution of the issue. I have tried contacting Adobe support, but that has led to nowhere. Most messages go out, but i need 100% reliability for this. Seeing as the problem is not with the CFMAIL tag, or my mail server (everything worked fine before we migrated to CF9 last year), I need an alternative that will completely bypass the CF engine all together. I was wondering if anyone had any suggestions. ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355291 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Optimising SQL Statement
Hi, We have a problem with one of our MySQL statements and wondering if you guys can help point us in the right direction. Basically the following statement is taking 5 seconds to run. We have diagnosed it is down to the join of two select statement. When the select statements are run individually they take only 0.2 seconds but when combined with the JOIN it takes 5 seconds. WE have been told then when MySQL performs a join it creates temporary tables in the background. Is this correct? Is there anything you can see that we are doing wrong or can you see a better way? code start -- SELECT temp_4.primaryid, temp_1.`subjectID` , temp_4.`testOccasionID` ,`studyNumbers` ,`testDate` FROM ( SELECT * FROM ( SELECT primarys.primaryid , q_1 AS `subjectID` , q_2 AS `studyNumbers` FROM primarys LEFT OUTER JOIN questions_1_100 ON primarys.primaryid = questions_1_100.primaryid WHERE 0 = 0 AND q_1 IS NOT NULL GROUP BY primaryid) AS maintable_1 GROUP BY `subjectID` ) AS temp_1 JOIN (SELECT * FROM (SELECT primarys.primaryid , q_1 AS `subjectID` , q_4 AS `testOccasionID` , DATE_FORMAT(q_5, '%m/%d/%Y') AS `testDate` FROM primarys LEFT OUTER JOIN questions_1_100 ON primarys.primaryid = questions_1_100.primaryid WHERE 0 = 0 AND q_1 IS NOT NULL AND q_4 IS NOT NULL GROUP BY primaryid) AS maintable_4 GROUP BY `subjectID` ,`testOccasionID` ) AS temp_4 ON temp_1.`subjectID` = temp_4.`subjectID` code end -- Many thanks Richard ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355292 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: postParametersLimit in CHF4
Thanks for your comments, Pete, Dave. Good links, Pete, that really helped me understand what's going on. Interesting to see such variation in default number of postParameters in ASP.net (1,000), Tomcat (10,000) and ColdFusion (100). We identified that most of the 1,006 postParameters in that one application are actually blank ( !! ). And yes, we think a rewrite is in order. Regards, Chris On Thu, Apr 4, 2013 at 11:53 PM, Pete Freitag p...@foundeo.com wrote: The vulnerability is caused by hash collisions, so if two strings hash to the same value, for example the result of java's hashCode() function on the name of a form field, then the hash table data structure becomes very inefficient. ColdFusion uses some sort of hash table algorithm to store the form fields (as well as url fields, cookies, etc but these are typically limited in size which makes them less of a target for this attack). CF was not the only technology to get hit by this issue many others including ASP.NET, node.js, j2ee/Tomcat, etc. Typically a hash table algorithm will account for collisions by putting all objects with the same hash code in a bucket, and then does a comparison of each value in the bucket to fetch the correct one, or to see if it is a duplicate when adding a new entry. You can see how the bucket could get very big, and operations on it get slower and slower with each collision added to the bucket if an attacker crafts a request with thousands of input variables whose names all collide to the same hash code. Under normal circumstances having 1000 form fields will not cause any collisions at all, and hash table lookups are quite fast. You may still want to limit the overall size of a request, but the HashDOS can be relatively small (eg 1-2mb) so that is why limiting the number of fields is considered the best protection. I wrote a blog entry on this a while back that also explains it as well: http://www.petefreitag.com/item/808.cfm -- Pete Freitag - Adobe Community Professional http://foundeo.com/ - ColdFusion Consulting Products http://hackmycf.com - Is your ColdFusion Server Secure? http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10 minutes On Thu, Apr 4, 2013 at 5:23 PM, Russ Michaels r...@michaels.me.uk wrote: So what actually causes the collision? Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 4, 2013 10:10 PM, Pete Freitag p...@foundeo.com wrote: Just to give you an idea with 80,000 post params that caused a hash collision it took my quad core desktop 31 minutes to respond to the request, sending a larger number of post params 120,000 that did not have a collision executed in 3 seconds. So what is safe really depends on your tolerance and CPU processing power. With 1000 colliding params you can probably cause a few seconds of processing time on the server. -- Pete Freitag - Adobe Community Professional http://foundeo.com/ - ColdFusion Consulting Products http://hackmycf.com - Is your ColdFusion Server Secure? http://www.youtube.com/watch?v=ubESB87vl5U - FuseGuard your CFML in 10 minutes On Thu, Apr 4, 2013 at 4:57 PM, Chris 0404tow...@gmail.com wrote: How many is too many post parameters? We've had a few applications fail with the new postParametersLimit in CHF4 (the included Security Hotfix APSB12-06, http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html) Even increasing postParametersLimit from 100 to 200 isn't enough -- one application uses 1006 post parameters ( !! ) So given that this is a denial of service attack prevention, how risky is it letting 1100 post parameters go through with every request? I'm figuring a real DoS attack would have a lot more than 1100 parameters, but setting post parameters for 11 times the security update value sounds like poor practice. thank you, Chris ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355293 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CFMail alternative
You would think that's the case, but it really wasn't. Ours was a lead generation system for sales people. When leads were submitted on the sites (2000+), they were cataloged in the db, available in an admin interface, and emailed to the salespeople, or their CRM systems, etc. If the client saw a lead in the admin that was not received by them, or their CRM, they were very quick to raise the flag, because that would mean they might be losing leads (and potential sales). So, while we might not have been notified of every instance, it's unlikely that there were very many we wouldn't have heard about. We experienced issues. But, in the end, each issue could be explained. One time the systems team changed the IP address of the SMTP server. My boss had originally configured the mail settings in the servers with IPs instead of domain names. It took 5 hours to respool all of the messages. Another time one client stopped receiving all comms from their site. Turns out they had their email hosted through a third party, and the IP of our SMTP server had been blacklisted because of another client doing bulk emailers. That same blacklist was used by multiple mail service providers. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010 https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book The best way to predict the future is to help create it On 4/5/2013 6:50 AM, Russ Michaels wrote: Dozens is literally nothing out of 800k per day. Imagine saying you are aware of every tv show on every channel, every day, how would you know of a glitch or disruption in any of those programmes unless you are watching them all or someone tells you. Even if someone told you about a couple of channels, there are hundreds of others you are still unaware of. The chances of you being aware of or told of every missing email when you send large qualtities is almost impossible. So anyone certainly could have this issue without realising. I am not saying that you do have this issue, simply that you could. If you check the Adobe forums you will see those other reports I mentioned of this same issue. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 5, 2013 11:30 AM, Steve 'Cutter' Blades cold.fus...@cutterscrossing.com wrote: I've had dozens of reports of missing mail, and it has always come down to something other than CF. The email address was wrong, the SMTP server was down, the domain of the sender had been blacklisted, something along these kind of lines. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010 https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book The best way to predict the future is to help create it On 4/4/2013 5:26 PM, Russ Michaels wrote: This has been reported many times on the forums. You say it has not happened to you, but how would know unless someone actually contacted you to say they had not reveived an email and you investigated it. In most cases of missing email, someone simply resends it and your none the wiser. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 4, 2013 9:48 PM, Steve 'Cutter' Blades cold.fus...@cutterscrossing.com wrote: That is surprising. Thirteen years with CF, from v4 thru 10, and that has never been my experience. It has always come down to the SMTP server, or the recipient, 100% of the time. One environment I ran processed upwards of 800,000 emails a day. When you say there is no record on the mail server, do you mean the recipient server? Or the SMTP server? Is there a spam filtering server in between somewhere? Does your CF server authenticate with your SMTP server on send? What sort of security checks and balances are setup on your SMTP server? If you have an entry in the CF Sent Mail log, then there was a valid handoff of your message to your SMTP server. If the hand off fails, it drops to the Undelivered folder. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010 https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book The best way to predict the future is to help create it On 4/4/2013 12:15 PM, Brian Cain wrote: I have had an ongoing problem with ColdFusion dropping some mail messages. The
Re: CFMail alternative
Steve, I think you have missed the point. Other people do have this issue and have had this issue, it is documented on the Adobe forums, as I have mentioned, so it is not a one off co-occurrence, as an Adobe Community Professional, I would have thought you would use the Adobe forums and be aware of common issues. Many more people could be having this issue than documented or realised simply because they are not aware of the missing emails. Your scenario is unique to you, it doesn't apply to every one else. We for example run servers with hundreds of websites, all sending emails to different destinations, we have absolutely no idea if any of those emails do not get sent and no way to tell unless a client tells us, and they would have no way to know unless someone tells them. On Fri, Apr 5, 2013 at 3:45 PM, Steve 'Cutter' Blades cold.fus...@cutterscrossing.com wrote: You would think that's the case, but it really wasn't. Ours was a lead generation system for sales people. When leads were submitted on the sites (2000+), they were cataloged in the db, available in an admin interface, and emailed to the salespeople, or their CRM systems, etc. If the client saw a lead in the admin that was not received by them, or their CRM, they were very quick to raise the flag, because that would mean they might be losing leads (and potential sales). So, while we might not have been notified of every instance, it's unlikely that there were very many we wouldn't have heard about. We experienced issues. But, in the end, each issue could be explained. One time the systems team changed the IP address of the SMTP server. My boss had originally configured the mail settings in the servers with IPs instead of domain names. It took 5 hours to respool all of the messages. Another time one client stopped receiving all comms from their site. Turns out they had their email hosted through a third party, and the IP of our SMTP server had been blacklisted because of another client doing bulk emailers. That same blacklist was used by multiple mail service providers. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010 https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book The best way to predict the future is to help create it On 4/5/2013 6:50 AM, Russ Michaels wrote: Dozens is literally nothing out of 800k per day. Imagine saying you are aware of every tv show on every channel, every day, how would you know of a glitch or disruption in any of those programmes unless you are watching them all or someone tells you. Even if someone told you about a couple of channels, there are hundreds of others you are still unaware of. The chances of you being aware of or told of every missing email when you send large qualtities is almost impossible. So anyone certainly could have this issue without realising. I am not saying that you do have this issue, simply that you could. If you check the Adobe forums you will see those other reports I mentioned of this same issue. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 5, 2013 11:30 AM, Steve 'Cutter' Blades cold.fus...@cutterscrossing.com wrote: I've had dozens of reports of missing mail, and it has always come down to something other than CF. The email address was wrong, the SMTP server was down, the domain of the sender had been blacklisted, something along these kind of lines. Steve 'Cutter' Blades Adobe Community Professional Adobe Certified Expert Advanced Macromedia ColdFusion MX 7 Developer http://cutterscrossing.com Co-Author Learning Ext JS 3.2 Packt Publishing 2010 https://www.packtpub.com/learning-ext-js-3-2-for-building-dynamic-desktop-style-user-interfaces/book The best way to predict the future is to help create it On 4/4/2013 5:26 PM, Russ Michaels wrote: This has been reported many times on the forums. You say it has not happened to you, but how would know unless someone actually contacted you to say they had not reveived an email and you investigated it. In most cases of missing email, someone simply resends it and your none the wiser. Regards Russ Michaels www.michaels.me.uk www.cfmldeveloper.com - Free CFML hosting for developers www.cfsearch.com - CF search engine On Apr 4, 2013 9:48 PM, Steve 'Cutter' Blades cold.fus...@cutterscrossing.com wrote: That is surprising. Thirteen years with CF, from v4 thru 10, and that has never been my experience. It has always come down to the SMTP server, or the recipient, 100% of the time. One environment I ran processed upwards of 800,000 emails a day. When you say there
RE: CFMail alternative
Other people do have this issue and have had this issue, it is documented on the Adobe forums Could you send a link to that? I ask because we have a custom built email module that uses CFMAIL. It works much like Constant Contact. It let's users build mailers from templates, send bulk mail (ten or thousands per site), tracks the opens, tracks clicks, etc. We have it deployed on more than 50 sites and there is an open rate and click trough rate similar to or even higher than what we normally get from a campaign running Constant Contact. There have sometimes been problems but we've always trace them to spam filters, blacklists, or something not CF related. If there's a problem with CFMAIL and not a problem with server management or the typical mail server issues, I'd like to review it. I have hundreds of thousands mails running through CFMAIL and too much at stake not to be aware of a CF problem... so far I've seen no indication of a problem with CFMAIL, but new information is always appreciated. Thanks Robert Harrison Director of Interactive Services Austin Williams Advertising I Branding I Digital I Direct 125 Kennedy Drive, Suite 100 I Hauppauge, NY 11788 T 631.231.6600 X 119 F 631.434.7022 http://www.austin-williams.com Blog: http://www.austin-williams.com/blog Twitter: http://www.twitter.com/austin_ ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355296 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
Re: CFMail alternative
I do not have a bookmarked link, so you would need to search the forums to find the threads. On Fri, Apr 5, 2013 at 6:16 PM, Robert Harrison rob...@austin-williams.comwrote: Other people do have this issue and have had this issue, it is documented on the Adobe forums Could you send a link to that? I ask because we have a custom built email module that uses CFMAIL. It works much like Constant Contact. It let's users build mailers from templates, send bulk mail (ten or thousands per site), tracks the opens, tracks clicks, etc. We have it deployed on more than 50 sites and there is an open rate and click trough rate similar to or even higher than what we normally get from a campaign running Constant Contact. There have sometimes been problems but we've always trace them to spam filters, blacklists, or something not CF related. If there's a problem with CFMAIL and not a problem with server management or the typical mail server issues, I'd like to review it. I have hundreds of thousands mails running through CFMAIL and too much at stake not to be aware of a CF problem... so far I've seen no indication of a problem with CFMAIL, but new information is always appreciated. Thanks Robert Harrison Director of Interactive Services Austin Williams Advertising I Branding I Digital I Direct 125 Kennedy Drive, Suite 100 I Hauppauge, NY 11788 T 631.231.6600 X 119 F 631.434.7022 http://www.austin-williams.com Blog: http://www.austin-williams.com/blog Twitter: http://www.twitter.com/austin_ ~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:355297 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
