RE: [Declude.JunkMail] Declude Crashing
I disabled autoreview and was then able to capture the emails that appear to be crashing Declude. They all seem to have one thing in common. The .hdr file has an unusual space as follows: Written [EMAIL PROTECTED] cmdspc: true helo: 17-94-189-190.cab.prima.net.ar The space between written and the email address doesn't seem to typically appear in SmarterMail's .hdr files however the emails that are crashing Declude appear to consistently have it. I do have a ticket open with Declude so hopefully they can help me out. Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Saturday, August 02, 2008 5:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude Crashing Do you have autoreview enabled? If so when Declude crashes on restart it will copy the files (work dir) back into the proc for processing. These types of crashes are most likely assuming no changes to your system a result of a bad message. If you disable autoreview and the crashes stop you can slowly copy the messages from the review folder into the proc to find which is the message that crashes Declude. Darrell Mark Strother wrote: For the past few hours we've had a real problem with Declude crashing and I can't figure it out. We're using SmarterMail 4.1 and Declude 4.1.14A. I've disabled all external plugins and filters and disabled the viruschecking so it's not related to that. I've cleared out all the queued messages, restarted everything and it crashes again within minutes. I've done that several times. Once I managed to get Declude running for about 10 minutes but then it crashed again. I'm not sure what else to do. For now I've had to disable Declude. I've turned up all logging to the highest level and don't see anything of note except 'Error in envelope file'. Can anyone provide some help or point in the right direction? We've been running Declude for 2 or so years and we do see the occasional crash but typically Windows restarts the service and everything is fine. In the case it just crashes over and over. Mark --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude Crashing
For the past few hours we've had a real problem with Declude crashing and I can't figure it out. We're using SmarterMail 4.1 and Declude 4.1.14A. I've disabled all external plugins and filters and disabled the viruschecking so it's not related to that. I've cleared out all the queued messages, restarted everything and it crashes again within minutes. I've done that several times. Once I managed to get Declude running for about 10 minutes but then it crashed again. I'm not sure what else to do. For now I've had to disable Declude. I've turned up all logging to the highest level and don't see anything of note except 'Error in envelope file'. Can anyone provide some help or point in the right direction? We've been running Declude for 2 or so years and we do see the occasional crash but typically Windows restarts the service and everything is fine. In the case it just crashes over and over. Mark --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Crashing
Thanks Darrell. That's good advice. I did have autoreview enabled. I've disabled it so hopefully I can catch a few of the bad messages shortly. I'll keep the list posted. Mark -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Saturday, August 02, 2008 5:17 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude Crashing Do you have autoreview enabled? If so when Declude crashes on restart it will copy the files (work dir) back into the proc for processing. These types of crashes are most likely assuming no changes to your system a result of a bad message. If you disable autoreview and the crashes stop you can slowly copy the messages from the review folder into the proc to find which is the message that crashes Declude. Darrell Mark Strother wrote: For the past few hours we've had a real problem with Declude crashing and I can't figure it out. We're using SmarterMail 4.1 and Declude 4.1.14A. I've disabled all external plugins and filters and disabled the viruschecking so it's not related to that. I've cleared out all the queued messages, restarted everything and it crashes again within minutes. I've done that several times. Once I managed to get Declude running for about 10 minutes but then it crashed again. I'm not sure what else to do. For now I've had to disable Declude. I've turned up all logging to the highest level and don't see anything of note except 'Error in envelope file'. Can anyone provide some help or point in the right direction? We've been running Declude for 2 or so years and we do see the occasional crash but typically Windows restarts the service and everything is fine. In the case it just crashes over and over. Mark --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SmarterMail and Subspools
Does Declude work correctly with the subspool feature of SmarterMail? I believe I read somewhere that it doesn't. This is a requirement of a high volume SmarterMail server and seems like it would relatively easy to implement. Can anyone comment? Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Tuesday, October 17, 2006 3:46 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Test - ignore Test, please ignore. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Crashes
This should be dealt with. Can't say I'm impressed that I have to rely on Windows to restart Declude after it crashes which now seems to be happening about 1/2 a dozen times each day. You would think that this would take priority to almost everything else. In fairness to Declude I haven't yet contacted them directly about this. Speaking of which, I should probably do so now. Mark Strother -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Tuesday, August 29, 2006 11:26 AM To: Mark Strother Subject: Re: [Declude.JunkMail] Declude Crashes I see the dame thing from time to time - almost every day . . . . Monday, August 28, 2006, 6:47:51 PM, Mark Strother [EMAIL PROTECTED] wrote: MS MS MS MS Does anyone else have problems with Declude crashing? Several MS times each day I see the following in our application event logs: MS MS MS MS Reporting queued error: faulting application decludeproc.exe, MS version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. MS MS MS MS Followed by this in the system logs: MS MS MS MS The Decludeproc service terminated unexpectedly. It has done MS this 1 time(s). The following corrective action will be taken in MS 1 milliseconds: Restart the service. MS MS MS MS It seems as though Declude restarts fine and we dont seem to MS suffer any ill effects but Id like to see it resolved. Were MS processing a fair volume of mail, 100,000+ messages per day. Were MS running Declude 4.3.7 with Sniffer but I can rule out Sniffer as MS being the issue as I disabled it temporarily and still saw these errors. MS MS MS Mark Strother MS Pacific Online MS Phone: 604-638-6010 ext. 222 MS Fax: 604-638-6020 MS Toll Free: 1-877-503-9870 MS http://www.pacificonline.com MS MS MS MS MS MS MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds MS Sent: Monday, August 28, 2006 2:41 PM MS To: declude.junkmail@declude.com MS Subject: RE: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Importance: High MS Sensitivity: Confidential MS MS MS MS MS Thanks John, MS MS MS MS I had the log mode set to high, debug seems to show a lot more detail. MS MS MS MS Anything in particular I should look out for? (in debug mode the MS log can chuck out more than 300 lines!!!) MS MS MS MS MS MS Kindest Regards MS Craig Edmonds MS 123 Marbella Internet MS W: www.123marbella.com MS E : [EMAIL PROTECTED] MS MS MS MS MS MS LEGAL DISCLAIMER - This message may contain confidential, MS proprietary or legally privileged information and is intended only MS for the use of the addressee named above. If you are not the MS intended recipient of this message you are hereby informed that MS you must not use, disseminate, copy it in any form or take any MS action in reliance on it. If you have received this message in MS error please delete it and any copies of it and notify it to the sender. MS MS MS MS MS MS AVISO LEGAL - Este mensaje puede contener informacion MS confidencial, en propiedad o legalmente protegida y esta dirigida MS unicamente para el uso de la persona destinataria. Si usted no es MS la persona destinataria de este mensaje, por la presente se le MS comunica que no debe usar, difundir, copiar de ninguna forma, ni MS emprender ninguna accion en relacion con ella. MS MS MS MS MS MS MS MS MS MS MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) MS Sent: Monday, August 28, 2006 7:25 PM MS To: declude.junkmail@declude.com MS Subject: RE: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Sensitivity: Confidential MS MS You need to review the log lines of a message that was marked, not one that shows Whitelisted. MS MS MS MS Preferably, the log should be in debug mode. MS MS MS MS MS John T MS MS eServices For You MS MS MS MS Seek, and ye shall find! MS MS MS MS MS MS -Original Message- MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds MS Sent: Monday, August 28, 2006 9:45 AM MS To: declude.junkmail@declude.com MS Subject: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Importance: High MS Sensitivity: Confidential MS MS MS MS MS Hi All, MS MS MS MS MS MS MS MS I have a strange problem with a client who has complained that MS **spam** is being put in the subject line of his outgoing emails. MS MS MS MS MS MS MS MS A quick check on the server logs (the declude logs) confirms that MS some of his emails are being passed through the spam tests and MS others are being whitelisted becasue he is an authenticated user
[Declude.JunkMail] Declude Crashes
Does anyone else have problems with Declude crashing? Several times each day I see the following in our application event logs: Reporting queued error: faulting application decludeproc.exe, version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. Followed by this in the system logs: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1 milliseconds: Restart the service. It seems as though Declude restarts fine and we dont seem to suffer any ill effects but Id like to see it resolved. Were processing a fair volume of mail, 100,000+ messages per day. Were running Declude 4.3.7 with Sniffer but I can rule out Sniffer as being the issue as I disabled it temporarily and still saw these errors. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Monday, August 28, 2006 2:41 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Importance: High Sensitivity: Confidential Thanks John, I had the log mode set to high, debug seems to show a lot more detail. Anything in particular I should look out for? (in debug mode the log can chuck out more than 300 lines!!!) Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Monday, August 28, 2006 7:25 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Sensitivity: Confidential You need to review the log lines of a message that was marked, not one that shows Whitelisted. Preferably, the log should be in debug mode. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Monday, August 28, 2006 9:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Importance: High Sensitivity: Confidential Hi All, I have a strange problem with a client who has complained that **spam** is being put in the subject line of his outgoing emails. A quick check on the server logs (the declude logs) confirms that some of his emails are being passed through the spam tests and others are being whitelisted becasue he is an authenticated user. example (Skipping E-mail from authenticated user [EMAIL PROTECTED]@mydomain.com; whitelisted) I have checked his machine and he has everything set up perfectly including smtp authentication etc. Why would some email be run through declude and other not? I am using IMAIL 8.11, Declude 4 (security suite) Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] How is a message score passed to SmarterMail?
The problem is we have over 10,000 webmail users. Teaching them to setup filters is not easy. Theyre used to seeing the integrated SmarterMail SPAM filtering options. I think Matt has a good idea. A very simple lightweight filter than runs on the SmarterMail server. It would look at the Declude score in the headers and pass the appropriate score to SmarterMail. If something like this existed wed have reason to buy two more licenses for Declude. Until then I guess well have to continue running Declude on the SmarterMail server itself. Ideally Id like to move this load to a couple gateway servers. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski - Handy Networks LLC Sent: Friday, July 28, 2006 11:35 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] How is a message score passed to SmarterMail? SmarterMail content filters can easily search headers I have been doing this for weeks without issue. Thanks! - Jay Sudowski // Handy Networks LLC Director of Technical Operations Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003 Hosting Solutions Tel: 877-70 HANDY x882 | Fax: 888-300-2FAX www.handynetworks.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Friday, July 28, 2006 1:27 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] How is a message score passed to SmarterMail? It would be nice if SmarterTools would introduce a simple scoreable text filter that could search at least the headers. That way a score could be passed from any gateway to SmarterMail for actions. Matt Jay Sudowski - Handy Networks LLC wrote: I can confirm this is the only way it will work. Declude communicatesthe score directly to SmarterMail in a way that breaks when a messagehas been relayed from a gateway server. In such instances, it'snecessary to setup SmarterMail content filter rules based up yourDeclude inserted headers and set the appropriate actions.-Jay-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of JohnT (Lists)Sent: Friday, July 28, 2006 3:37 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] How is a message score passed toSmarterMail?I think what he means is serverA is doing the scanning and then themessageis sent to serverB and he wants serverB to know what the score was andtotake action.Why not add a custom header line with the total weight via Declude andthenset up the rules on serverB to look for that line in the header.John TeServices For YouSeek, and ye shall find! -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kevin BilbeeSent: Thursday, July 27, 2006 9:51 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] How is a message score passed to SmarterMail? It is passed int the .hdr file.Kevin Bilbee -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] OnBehalf Of Mark StrotherSent: Thursday, July 27, 2006 9:03 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] How is a message score passed toSmarterMail?Could someone explain to me how the message score is passedto SmarterMail?I would like to set up a SmarterMail server, running Declude,as a gateway for our mail. The problem with this setup is, inmy tests, SmarterMail doesn't recognize the Declude scoreswhen they are a generated on another server. This means thatusers wouldn't be able to configure their own rules such asdelete mail if the score is 20.Is there anyway I can run Declude on my gateway server andpass the score to SmarterMail on another server? I just wantto tag the messages on the gateway machine and then let usersset custom actions using the SmarterMail interface.Any thoughts would be appreciated! Mark---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can befound at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com.---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype unsubscribe Declude.JunkMail. The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.Jun
[Declude.JunkMail] How is a message score passed to SmarterMail?
Could someone explain to me how the message score is passed to SmarterMail? I would like to set up a SmarterMail server, running Declude, as a gateway for our mail. The problem with this setup is, in my tests, SmarterMail doesn't recognize the Declude scores when they are a generated on another server. This means that users wouldn't be able to configure their own rules such as delete mail if the score is 20. Is there anyway I can run Declude on my gateway server and pass the score to SmarterMail on another server? I just want to tag the messages on the gateway machine and then let users set custom actions using the SmarterMail interface. Any thoughts would be appreciated! Mark --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Whatever the previous setup was seemed to be working fine for us. I guess SmarterMail was deleting these automatically? We have well over 10,000 email accounts and never saw any spam leakage as discussed here. Now I have an error directory that grows 1+ GBs each day. If SmarterMail isn't deleting these correctly then I hope this information has been passed to them so this can be fixed. SmarterMail has been pretty responsive to our requests. It seems odd that Declude would have to hack together a fix for something that is apparently a SmarterMail issue. I just don't want to have to deal with thousands of messages in the error directory and have to search through them daily to ensure they should all be there. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, July 12, 2006 4:33 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, If we gave you the option to delete these messages (as SmarterMail should be doing) rather than move them to the \error directory would that solve your problem ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Wednesday, July 12, 2006 3:41 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 As far as I'm concerned it's not a solution. SmarterMail deleting these messages was not a problem for me, Declude dumping them into the error folder is. I wasn't having a problem before 4.2.20, now I am. Everyone in support has their stint as the piñada. My users don't know who SmarterTools or Declude are, they just know when they don't get their messages or messages they send don't reach their destination. But they know who I am, so I have to hold their hands and hear their cries and then take it back to SmarterTools and Declude. And believe me, my users really know how to hit a piñada because most of them are Spanish. :) Another interesting thing is, before the decision was made to put this fix in a release version, didn't anyone foresee that dumping all these previously deleted files into the error folder would cause a problem? As soon as all those messages started showing up in my error directory it became pretty obvious. Seems that this work you mention that Declude is doing with SmarterMail to resolve this problem should have been done before the fix was put into 4.2.20. Original Message From: David Barker [EMAIL PROTECTED] Sent: Tuesday, July 11, 2006 5:49 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, From time to time I feel like the Declude pinyada but in this instance we have provided a solution for what is happening in SM. And as I have said we are working with them to resolve this between us. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 5:31 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 I don't have an answer to this question. I just know that it is a problem. But what I find amusing is, here is another instance of two vendors of interacting software products who point the finger at each other, both saying it's the other guy's fault. Original Message From: John T \(Lists\) [EMAIL PROTECTED] Sent: Tuesday, July 11, 2006 5:21 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Although I do not use SmarterMail, my take is these are like T files in Imail where it is not a complete message, but for some reason SmarterMail is allowing Declude to have them even though they are not complete. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 12:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Here is SmarterTools take on the problem: Failed is written to the .hdr if the message was not succesfully recieved via SMTP. For instance, if the connection is closed mid transmission. These(and corresponding .emls) are normally just deleted by SmarterMail. The only reason you are noticing them is because of Declude storing them in the error folder. The implication is that Declude is interrupting part of SmarterMail's normail process. Now I know this is essentially what Declude does anyway, but shouldn't
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
As long as someone is working on this. I have 20,000 messages in the
error directory from the past 48 hours. Obviously there is no way we can
sort through this volume of mail. Randomly looking at samples it appears
as though every messages has the Failed text in the .hdr file. I can
only hope that these are all messages that can be deleted.
Mark Strother
Pacific Online
Phone: 604-638-6010 ext. 222
Fax: 604-638-6020
Toll Free: 1-877-503-9870
http://www.pacificonline.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
David Barker
Sent: Tuesday, July 11, 2006 2:35 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Gary,
From time to time I feel like the Declude pinyada but in this instance
we
have provided a solution for what is happening in SM. And as I have said
we
are working with them to resolve this between us.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 11, 2006 5:31 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
I don't have an answer to this question. I just know that it is a
problem.
But what I find amusing is, here is another instance of two vendors of
interacting software products who point the finger at each other, both
saying it's the other guy's fault.
Original Message
From: John T \(Lists\) [EMAIL PROTECTED]
Sent: Tuesday, July 11, 2006 5:21 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Although I do not use SmarterMail, my take is these are like T files
in Imail where it is not a complete message, but for some reason
SmarterMail is allowing Declude to have them even though they are not
complete.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary Steiner
Sent: Tuesday, July 11, 2006 12:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Here is SmarterTools take on the problem:
Failed is written to the .hdr if the message was not succesfully
recieved via SMTP.
For
instance, if the connection is closed mid transmission. These(and
corresponding
.emls) are
normally just deleted by SmarterMail. The only reason you are
noticing
them is
because of
Declude storing them in the error folder.
The implication is that Declude is interrupting part of
SmarterMail's
normail process.
Now I know this is essentially what Declude does anyway, but
shouldn't
Declude know
the difference between a message that has finished SMTP and
SmarterMail is
ready to
deliver, and a message that is incomplete in the SMTP process and an
SMTP
retry is
occurring so this failed message should be ignored? Otherwise we
are
going to get
thousands of unneccessary incomplete messages dumped into the error
folder
that is
going to do nothing other than to take up disk space. Not to
mention that
if some
other type of error occurs that puts a message in the error folder,
we'll
never find it
because its buried under all these other superfluous messages.
Before
4.2.20, this
wasn't a problem.
Original Message
From: David Barker [EMAIL PROTECTED]
Sent: Monday, July 10, 2006 3:24 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Gary,
This is a SmarterMail issue. When they fail to complete the .hdr
file
they
write Failed in the .hdr as this was causing major spam leakage
for declude we decided to move incomplete messages to the \error
folder.
You
could try changing the Failed to Written and drop the messages
in the \spool.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Gary Steiner
Sent: Monday, July 10, 2006 2:52 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Now that I've installed 4.2.20, I'm getting a lot of messages in
the
error
folder (I'm running SmarterMail 3.3.2369). Most of them seem to
be
spam,
but there are some good messages in there. Am I now going to have
to
scan
this folder for false positives just like the held spam folder?
Here is an example of the .hdr file for a message that was good:
Failed
[EMAIL PROTECTED]
[EMAIL PROTECTED]
cmdspc: false
helo: ivmail1.fcc.es
What does Failed mean? Is there something I can look for in the
headers
of the message (in the .eml file) that would indicate this? Is
there
any
way to requeue this message?
Original Message
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Okay. I can confirm that all 20,000 messages have failed in the header file. My problem now seems to be that this directory is pretty large in size. A lot of these messages are larger than our maximum allowed size. I'm guessing that when SmarterMail receives an email larger than the maximum allowed size it writes failed in the header. Previously these were automatically deleted by SmarterMail and we never saw them. Now they're building up in the error directory. The maximum size we allow for an email is 25MBs but in this directory I see a lot of emails that are 25 MBs. I think I'm going to have to create a script that will clear this directory every day or so. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Tuesday, July 11, 2006 6:33 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Mark, try this. Go to Windows Search function. Search files *.hdr Search text in files failed Search only the error directory. Once you run the search, select all, cut, past into a temp directory. You can now view the error directory to see if there is any file there that does not have failed in it. Again, I do not use SmarterMail so I do not know exactly how that is working but just trying to provide some assistance. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Strother Sent: Tuesday, July 11, 2006 4:34 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 As long as someone is working on this. I have 20,000 messages in the error directory from the past 48 hours. Obviously there is no way we can sort through this volume of mail. Randomly looking at samples it appears as though every messages has the Failed text in the .hdr file. I can only hope that these are all messages that can be deleted. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, July 11, 2006 2:35 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, From time to time I feel like the Declude pinyada but in this instance we have provided a solution for what is happening in SM. And as I have said we are working with them to resolve this between us. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 5:31 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 I don't have an answer to this question. I just know that it is a problem. But what I find amusing is, here is another instance of two vendors of interacting software products who point the finger at each other, both saying it's the other guy's fault. Original Message From: John T \(Lists\) [EMAIL PROTECTED] Sent: Tuesday, July 11, 2006 5:21 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Although I do not use SmarterMail, my take is these are like T files in Imail where it is not a complete message, but for some reason SmarterMail is allowing Declude to have them even though they are not complete. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 12:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Here is SmarterTools take on the problem: Failed is written to the .hdr if the message was not succesfully recieved via SMTP. For instance, if the connection is closed mid transmission. These(and corresponding .emls) are normally just deleted by SmarterMail. The only reason you are noticing them is because of Declude storing them in the error folder. The implication is that Declude is interrupting part of SmarterMail's normail process. Now I know this is essentially what Declude does anyway, but shouldn't Declude know the difference between a message that has finished SMTP and SmarterMail is ready to deliver, and a message that is incomplete in the SMTP process and an SMTP retry is occurring so this failed message should be ignored? Otherwise we are going to get thousands of unneccessary incomplete messages
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
I have 9,000 messages from the past 48 hours or so in the error directory. We're also using SmarterMail. It look as though all of these have the word FAILED in the .hdr file. David said in a previous message, When they fail to complete the .hdr file they write Failed in the .hdr Can you clarify this a bit. Why is SmarterMAil failing to complete the .hdr file? The majority of these messages appear to be completely empty. It it safe to delete all of these? Before deleting these I'd like to understand exactly what is going on. Why the .hdr files are incomplete. What happens to these message if you are not running Declude? Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Jaworski Sent: Monday, July 10, 2006 12:28 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 I am getting a lot of these too, some of which show a 421 timeout in the SmarterMail SMTP logs. Example: data transfer failed. 421 Command timeout. closing transmission channel. Mike -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Monday, July 10, 2006 11:52 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Now that I've installed 4.2.20, I'm getting a lot of messages in the error folder (I'm running SmarterMail 3.3.2369). Most of them seem to be spam, but there are some good messages in there. Am I now going to have to scan this folder for false positives just like the held spam folder? Here is an example of the .hdr file for a message that was good: Failed [EMAIL PROTECTED] [EMAIL PROTECTED] cmdspc: false helo: ivmail1.fcc.es What does Failed mean? Is there something I can look for in the headers of the message (in the .eml file) that would indicate this? Is there any way to requeue this message? Original Message From: David Barker [EMAIL PROTECTED] Sent: Friday, July 07, 2006 11:01 AM To: Declude.Virus@declude.com, Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 EVA ADD New NONSTANDARDHDR vulnerability test. Messages found to have broken headers are moved to the \virus folder EVA FIX ALLOWVULNERABILITIESFROM (for user) EVA FIX BANEXT buffer overflow SMADD When an error is found in the envelope (.hdr) file the message is moved to the \error folder SMADD Decludeproc will not start without a valid domainlist.xml SMFIX QUEUEFILE_SAVEFILE the log is showing the correct directory path SMFIX Allows admin to set VIRDIR to any directory path in the virus.cfg David Barker Product Manager Your Email security is our businessT 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
