Re[3]: [Declude.JunkMail] HUGE spool folder
Wednesday, June 12, 2002 you wrote: RSP> Given the volume you had at the time, it sounds like the CPU was extremely RSP> busy, and these may have been valid timeouts. Hardly any volume. CPU was taxed when the group of bounced messages came in some I suppose but certainly not while I was watching. RSP> Could those 2,000 E-mails be sent in batches? IMail's RSP> architecture makes it handle large volumes of E-mail best when RSP> they are batched (whether or not Declude is being used). IMAIL did not handle 2,000. The mailing was from another mail server. But the bounces come back to IMAIL. The first batch had about 200 bounces hit at once. The 2nd batch had about 120 or so hit at once. RSP> Any chance you used the "Send One" button in IMail Administrator RSP> around that time? Yes. Both times I had to use send one to rid the spool of the "stuck" messages. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re[2]: [Declude.JunkMail] HUGE spool folder
>Forgot to check. Yes - we had these lines coincidental with the >incident: --- > >06/12/2002 10:04:46 Q62be1d8101fe3fd0 ERROR: Virus scanner didn't >finish after 60 seconds; terminating. That would explain the leftover .vir directories. Given the volume you had at the time, it sounds like the CPU was extremely busy, and these may have been valid timeouts. Could those 2,000 E-mails be sent in batches? IMail's architecture makes it handle large volumes of E-mail best when they are batched (whether or not Declude is being used). >06/12/2002 16:57:37 Passing to SMTP1: -v C:\IMail\spool\Qb68b00160216f9ee.SMD >06/12/2002 16:57:41 Passing to SMTP1: -v C:\IMail\spool\Qb68b004c01eaf8a4.SMD Any chance you used the "Send One" button in IMail Administrator around that time? That message will show up if you have the logging level set to MID or higher, and IMail starts Declude with an extra parameter (-v in this case, which I believe is used with the "Send One", and indicates extra logging). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re[2]: [Declude.JunkMail] HUGE spool folder
Forgot to check. Yes - we had these lines coincidental with the incident: --- 06/12/2002 10:04:46 Q62be1d8101fe3fd0 ERROR: Virus scanner didn't finish after 60 seconds; terminating. Then 39 more virus free lines followed by 10 "scanner didn't finish" lines. Then some more virus free and more "didn't finish" - until I rebooted. Nothing strange in the JunkMail logs in the morning but these were at the afternoon incident: 06/12/2002 16:57:37 Passing to SMTP1: -v C:\IMail\spool\Qb68b00160216f9ee.SMD 06/12/2002 16:57:41 Passing to SMTP1: -v C:\IMail\spool\Qb68b004c01eaf8a4.SMD Terry Fritts Wednesday, June 12, 2002 you wrote: RSP> Were there any error messages in the log file? If Declude Virus can't RSP> delete the .vir directories, there should be a log file entry with more RSP> information as to what happened. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] HUGE spool folder
>Declude left a number of .vir directories ... Were there any error messages in the log file? If Declude Virus can't delete the .vir directories, there should be a log file entry with more information as to what happened. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] HUGE spool folder
We had a situation twice today where IMAIL just quit delivering messages. We sent out a relatively small mailing of 2,000+ messages from another sever but the bounces came back to our Imail server. Each time the server received maybe 200 messages at one time. The declude overflow folder had 100-170 or so and another 30 in the spool. Declude left a number of .vir directories and in Task manager there were many (didn't count them) declude.exe tasks accompanied by an equal number of sniffer.exe tasks. There was not a corresponding SMTP task for each one. Toggling the mail server itself did not help. The messages would not send using the console. Finally I rebooted the server. As soon as it came up the overflow directory emptied and most of the queue emptied except for the 30 or so messages in the queue which were stuck before reboot in some stage of delivery. I had to send them one by one from the console. They all delivered - just took me a few minutes to send them. I think all of them were local deliveries from <>. In the log files I got a few of these errors new to me anyway: local fail to domain account-main (310) <> 0 I had to delete the .vir directories. Some had files in them. This is the first time we've seen this in similar mailings. I think it may have something to do with sniffer's interaction with declude when a bunch of messages are moved to the overflow directory. Sniffer is the only significant change we've made in the last few days. Declude seems to be doing what it is supposed to do but something at some point simply stops Imail from delivering certain messages in the spool and then Declude never puts the overflow back until I reboot. We had a morning mailing and an afternoon mailing and the same thing happened in each case. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] HUGE spool folder
Title: Message
Are
you sure they're not NDR's from Klez?
I've
been flooded with them. I had to change my SMTP retry to 6
hours.
Check
for that and also use SpamReview to look at the HOLD items.
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of Glenn \ WCNetSent: Wednesday, June 12, 2002 7:14
PMTo: [EMAIL PROTECTED]Subject: Re:
[Declude.JunkMail] HUGE spool folder
Before changing WEIGHT30 to HOLD, it was
WARN.
WEIGHT10, 14, and 20 are still WARN. All
other tests are LOG.
G.Z.
- Original Message -
From:
R. Scott
Perry
To: [EMAIL PROTECTED]
Sent: Wednesday, June 12, 2002 6:10
PM
Subject: Re: [Declude.JunkMail] HUGE
spool folder
>I upgraded from IMail 6.06 to IMail 7.1 HF1 a few
days ago. Since then, >my spool directory has grown by leaps
and bounds. It normally runs >between 300 and 500 files (I
think). Yesterday evening it was at about >1500. Earlier
this afternoon it passed 2800. Now it's about 2750. I've
>moved (a few) files older than 3 days out of the queue, it didn't
make any >difference -- spool keeps growing. They look like
normal T, D, and Q >files dated within the last three days, but why
are there so many??? I'm >not getting any specific complaints
about undelivered or missing mail from >my users.>>I am
running Declude JunkMail and Virus. Perhaps the extra processing is
>putting too much of a load on the server?That shouldn't be
it -- you should see similar loads on 6.06 and 7.1.Have you checked
the spool files to see if there is any pattern to what is in there, to
make sure the problem isn't a mail loop, for example?>Yesterday
afternoon I changed my default $junkmail$.config to HOLD on
>WEIGHT30. I do think the spool started growing *before* that
change, but >in case I'm mistaken and it was after, would there be
any connection??What was it before? If it was DELETE before,
there would be slightly more system load having it at HOLD, but it
shouldn't be enough to cause mail delivery to slow
down.
-Scott---[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]---This
E-mail came from the Declude.JunkMail mailing list. Tounsubscribe,
just send an E-mail to [EMAIL PROTECTED], andtype
"unsubscribe Declude.JunkMail". You can E-mail[EMAIL PROTECTED] for
assistance. You can visit our website at http://www.declude.com
.
Re: [Declude.JunkMail] HUGE spool folder
Before changing WEIGHT30 to HOLD, it was WARN. WEIGHT10, 14, and 20 are still WARN. All other tests are LOG. G.Z. - Original Message - From: R. Scott Perry To: [EMAIL PROTECTED] Sent: Wednesday, June 12, 2002 6:10 PM Subject: Re: [Declude.JunkMail] HUGE spool folder >I upgraded from IMail 6.06 to IMail 7.1 HF1 a few days ago. Since then, >my spool directory has grown by leaps and bounds. It normally runs >between 300 and 500 files (I think). Yesterday evening it was at about >1500. Earlier this afternoon it passed 2800. Now it's about 2750. I've >moved (a few) files older than 3 days out of the queue, it didn't make any >difference -- spool keeps growing. They look like normal T, D, and Q >files dated within the last three days, but why are there so many??? I'm >not getting any specific complaints about undelivered or missing mail from >my users.>>I am running Declude JunkMail and Virus. Perhaps the extra processing is >putting too much of a load on the server?That shouldn't be it -- you should see similar loads on 6.06 and 7.1.Have you checked the spool files to see if there is any pattern to what is in there, to make sure the problem isn't a mail loop, for example?>Yesterday afternoon I changed my default $junkmail$.config to HOLD on >WEIGHT30. I do think the spool started growing *before* that change, but >in case I'm mistaken and it was after, would there be any connection??What was it before? If it was DELETE before, there would be slightly more system load having it at HOLD, but it shouldn't be enough to cause mail delivery to slow down. -Scott---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". You can E-mail[EMAIL PROTECTED] for assistance. You can visit our website at http://www.declude.com .
Re: [Declude.JunkMail] HUGE spool folder
>I upgraded from IMail 6.06 to IMail 7.1 HF1 a few days ago. Since then, >my spool directory has grown by leaps and bounds. It normally runs >between 300 and 500 files (I think). Yesterday evening it was at about >1500. Earlier this afternoon it passed 2800. Now it's about 2750. I've >moved (a few) files older than 3 days out of the queue, it didn't make any >difference -- spool keeps growing. They look like normal T, D, and Q >files dated within the last three days, but why are there so many??? I'm >not getting any specific complaints about undelivered or missing mail from >my users. > >I am running Declude JunkMail and Virus. Perhaps the extra processing is >putting too much of a load on the server? That shouldn't be it -- you should see similar loads on 6.06 and 7.1. Have you checked the spool files to see if there is any pattern to what is in there, to make sure the problem isn't a mail loop, for example? >Yesterday afternoon I changed my default $junkmail$.config to HOLD on >WEIGHT30. I do think the spool started growing *before* that change, but >in case I'm mistaken and it was after, would there be any connection?? What was it before? If it was DELETE before, there would be slightly more system load having it at HOLD, but it shouldn't be enough to cause mail delivery to slow down. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] HUGE spool folder
Howdy to all. I know this isn't an IMail support list, but perhaps someone can shed some light on this situation . . . I upgraded from IMail 6.06 to IMail 7.1 HF1 a few days ago. Since then, my spool directory has grown by leaps and bounds. It normally runs between 300 and 500 files (I think). Yesterday evening it was at about 1500. Earlier this afternoon it passed 2800. Now it's about 2750. I've moved (a few) files older than 3 days out of the queue, it didn't make any difference -- spool keeps growing. They look like normal T, D, and Q files dated within the last three days, but why are there so many??? I'm not getting any specific complaints about undelivered or missing mail from my users. I am running Declude JunkMail and Virus. Perhaps the extra processing is putting too much of a load on the server? Per WhatsUp, SMTP and/or HTTP (WebMail) keeps bouncing up and down, but the services never actually fail. SMTP and POP3 are a touch sluggish in my OE, but they do work. WebMessaging has also been a touch flaky, and there were a few complaints from users yesterday. Yesterday afternoon I changed my default $junkmail$.config to HOLD on WEIGHT30. I do think the spool started growing *before* that change, but in case I'm mistaken and it was after, would there be any connection?? Thanks! Glenn Z.
