RE: [Declude.JunkMail] Declude Crashes
So if we are using our own custom filters, what kind of filter rules should we be watching out for? -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Linda Pagillo Sent: Thursday, April 16, 2009 9:36 AM To: declude.junkmail@declude.com Cc: declude.vi...@declude.com Subject: [Declude.JunkMail] Declude Crashes Hi everyone. I wanted to make you all aware of a possible issue that you may be having. There is a rash of spam that has been going around for the past 3 days. The spam has malformed headers which are causing Declude to crash repeatedly. We were able to find where it was crashing Declude. If you are experiencing this issue you need to go to your global.cfg file and comment out your FILTER-SCAM and FILTER-SPAM lines then restart your decludeproc service. This will stop the crashing. There is a line in those filters which is causing Declude to crash when it sees the malformed headers. We have identified which line it is and we are working on figuring out why it causes Declude to crash. In the mean time, commenting out those 2 filters will work to stop the crashes. Also, remember to check your review folder under your proc directory for any mail that was placed there yesterday and today. If you find mail there, you can move it to your proc directory after you comment out the filters and declude will process it normally. If you have a large amount of mail in review, I suggest that you move it in smaller batches at a time so Declude can handle it more efficiently. If you have any questions, please post them to this list. I will be checking my mail all day. Thank you. If you have any further questions, please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Ext.2 Linda Pagillo Technical Support Engineer | Declude Your Email Security is our business Direct: 978-225-8347 Office: 978.499.2933 Ext.2 Toll Free: 1-866.332.5833 Ext.2 Fax: 978.334.0700 Email: lpagi...@declude.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Crashes
Scott, this is the exact line that it's tripping on (\b([A-Z0-9]|\W){250}\b)
If you have any further questions, please do not hesitate to contact me
either by email or call Toll free 1-866-332-5833 Ext.2
Linda Pagillo
Technical Support Engineer | Declude
Your Email Security is our business
Direct: 978-225-8347
Office: 978.499.2933 Ext.2
Toll Free: 1-866.332.5833 Ext.2
Fax: 978.334.0700
Email: lpagi...@declude.com
- Original Message -
From: Scott Fisher
To: declude.junkmail@declude.com
Sent: Thursday, April 16, 2009 2:11 PM
Subject: RE: [Declude.JunkMail] Declude Crashes
So if we are using our own custom filters, what kind of filter rules should
we be watching out for?
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Linda
Pagillo
Sent: Thursday, April 16, 2009 9:36 AM
To: declude.junkmail@declude.com
Cc: declude.vi...@declude.com
Subject: [Declude.JunkMail] Declude Crashes
Hi everyone. I wanted to make you all aware of a possible issue that you may
be having. There is a rash of spam that has been going around for the past 3
days. The spam has malformed headers which are causing Declude to crash
repeatedly.
We were able to find where it was crashing Declude. If you are experiencing
this issue you need to go to your global.cfg file and comment out your
FILTER-SCAM and FILTER-SPAM lines then restart your decludeproc service. This
will stop the crashing.
There is a line in those filters which is causing Declude to crash when it
sees the malformed headers. We have identified which line it is and we are
working on figuring out why it causes Declude to crash. In the mean time,
commenting out those 2 filters will work to stop the crashes.
Also, remember to check your review folder under your proc directory for any
mail that was placed there yesterday and today. If you find mail there, you can
move it to your proc directory after you comment out the filters and declude
will process it normally. If you have a large amount of mail in review, I
suggest that you move it in smaller batches at a time so Declude can handle it
more efficiently.
If you have any questions, please post them to this list. I will be checking
my mail all day. Thank you.
If you have any further questions, please do not hesitate to contact me
either by email or call Toll free 1-866-332-5833 Ext.2
Linda Pagillo
Technical Support Engineer | Declude
Your Email Security is our business
Direct: 978-225-8347
Office: 978.499.2933 Ext.2
Toll Free: 1-866.332.5833 Ext.2
Fax: 978.334.0700
Email: lpagi...@declude.com
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Crashes
This should be dealt with. Can't say I'm impressed that I have to rely on Windows to restart Declude after it crashes which now seems to be happening about 1/2 a dozen times each day. You would think that this would take priority to almost everything else. In fairness to Declude I haven't yet contacted them directly about this. Speaking of which, I should probably do so now. Mark Strother -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Tuesday, August 29, 2006 11:26 AM To: Mark Strother Subject: Re: [Declude.JunkMail] Declude Crashes I see the dame thing from time to time - almost every day . . . . Monday, August 28, 2006, 6:47:51 PM, Mark Strother [EMAIL PROTECTED] wrote: MS MS MS MS Does anyone else have problems with Declude crashing? Several MS times each day I see the following in our application event logs: MS MS MS MS Reporting queued error: faulting application decludeproc.exe, MS version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. MS MS MS MS Followed by this in the system logs: MS MS MS MS The Decludeproc service terminated unexpectedly. It has done MS this 1 time(s). The following corrective action will be taken in MS 1 milliseconds: Restart the service. MS MS MS MS It seems as though Declude restarts fine and we dont seem to MS suffer any ill effects but Id like to see it resolved. Were MS processing a fair volume of mail, 100,000+ messages per day. Were MS running Declude 4.3.7 with Sniffer but I can rule out Sniffer as MS being the issue as I disabled it temporarily and still saw these errors. MS MS MS Mark Strother MS Pacific Online MS Phone: 604-638-6010 ext. 222 MS Fax: 604-638-6020 MS Toll Free: 1-877-503-9870 MS http://www.pacificonline.com MS MS MS MS MS MS MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds MS Sent: Monday, August 28, 2006 2:41 PM MS To: declude.junkmail@declude.com MS Subject: RE: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Importance: High MS Sensitivity: Confidential MS MS MS MS MS Thanks John, MS MS MS MS I had the log mode set to high, debug seems to show a lot more detail. MS MS MS MS Anything in particular I should look out for? (in debug mode the MS log can chuck out more than 300 lines!!!) MS MS MS MS MS MS Kindest Regards MS Craig Edmonds MS 123 Marbella Internet MS W: www.123marbella.com MS E : [EMAIL PROTECTED] MS MS MS MS MS MS LEGAL DISCLAIMER - This message may contain confidential, MS proprietary or legally privileged information and is intended only MS for the use of the addressee named above. If you are not the MS intended recipient of this message you are hereby informed that MS you must not use, disseminate, copy it in any form or take any MS action in reliance on it. If you have received this message in MS error please delete it and any copies of it and notify it to the sender. MS MS MS MS MS MS AVISO LEGAL - Este mensaje puede contener informacion MS confidencial, en propiedad o legalmente protegida y esta dirigida MS unicamente para el uso de la persona destinataria. Si usted no es MS la persona destinataria de este mensaje, por la presente se le MS comunica que no debe usar, difundir, copiar de ninguna forma, ni MS emprender ninguna accion en relacion con ella. MS MS MS MS MS MS MS MS MS MS MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) MS Sent: Monday, August 28, 2006 7:25 PM MS To: declude.junkmail@declude.com MS Subject: RE: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Sensitivity: Confidential MS MS You need to review the log lines of a message that was marked, not one that shows Whitelisted. MS MS MS MS Preferably, the log should be in debug mode. MS MS MS MS MS John T MS MS eServices For You MS MS MS MS Seek, and ye shall find! MS MS MS MS MS MS -Original Message- MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds MS Sent: Monday, August 28, 2006 9:45 AM MS To: declude.junkmail@declude.com MS Subject: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Importance: High MS Sensitivity: Confidential MS MS MS MS MS Hi All, MS MS MS MS MS MS MS MS I have a strange problem with a client who has complained that MS **spam** is being put in the subject line of his outgoing emails. MS MS MS MS MS MS MS MS A quick check on the server logs (the declude logs) confirms that MS some of his emails are being passed through the spam tests and MS others are being whitelisted becasue he is an authenticated user
Re: [Declude.JunkMail] Declude Crashes
I see the dame thing from time to time - almost every day . . . . Monday, August 28, 2006, 6:47:51 PM, Mark Strother [EMAIL PROTECTED] wrote: MS MS MS MS Does anyone else have problems with Declude crashing? Several MS times each day I see the following in our application event logs: MS MS MS MS Reporting queued error: faulting application decludeproc.exe, MS version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. MS MS MS MS Followed by this in the system logs: MS MS MS MS The Decludeproc service terminated unexpectedly. It has done MS this 1 time(s). The following corrective action will be taken in MS 1 milliseconds: Restart the service. MS MS MS MS It seems as though Declude restarts fine and we dont seem to MS suffer any ill effects but Id like to see it resolved. Were MS processing a fair volume of mail, 100,000+ messages per day. Were MS running Declude 4.3.7 with Sniffer but I can rule out Sniffer as MS being the issue as I disabled it temporarily and still saw these errors. MS MS MS Mark Strother MS Pacific Online MS Phone: 604-638-6010 ext. 222 MS Fax: 604-638-6020 MS Toll Free: 1-877-503-9870 MS http://www.pacificonline.com MS MS MS MS MS MS MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds MS Sent: Monday, August 28, 2006 2:41 PM MS To: declude.junkmail@declude.com MS Subject: RE: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Importance: High MS Sensitivity: Confidential MS MS MS MS MS Thanks John, MS MS MS MS I had the log mode set to high, debug seems to show a lot more detail. MS MS MS MS Anything in particular I should look out for? (in debug mode the MS log can chuck out more than 300 lines!!!) MS MS MS MS MS MS Kindest Regards MS Craig Edmonds MS 123 Marbella Internet MS W: www.123marbella.com MS E : [EMAIL PROTECTED] MS MS MS MS MS MS LEGAL DISCLAIMER - This message may contain confidential, MS proprietary or legally privileged information and is intended only MS for the use of the addressee named above. If you are not the MS intended recipient of this message you are hereby informed that MS you must not use, disseminate, copy it in any form or take any MS action in reliance on it. If you have received this message in MS error please delete it and any copies of it and notify it to the sender. MS MS MS MS MS MS AVISO LEGAL - Este mensaje puede contener informacion MS confidencial, en propiedad o legalmente protegida y esta dirigida MS unicamente para el uso de la persona destinataria. Si usted no es MS la persona destinataria de este mensaje, por la presente se le MS comunica que no debe usar, difundir, copiar de ninguna forma, ni MS emprender ninguna accion en relacion con ella. MS MS MS MS MS MS MS MS MS MS MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) MS Sent: Monday, August 28, 2006 7:25 PM MS To: declude.junkmail@declude.com MS Subject: RE: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Sensitivity: Confidential MS MS You need to review the log lines of a message that was marked, not one that shows Whitelisted. MS MS MS MS Preferably, the log should be in debug mode. MS MS MS MS MS John T MS MS eServices For You MS MS MS MS Seek, and ye shall find! MS MS MS MS MS MS -Original Message- MS From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds MS Sent: Monday, August 28, 2006 9:45 AM MS To: declude.junkmail@declude.com MS Subject: [Declude.JunkMail] some emails being marked with MS **spam** despite being authenticated MS Importance: High MS Sensitivity: Confidential MS MS MS MS MS Hi All, MS MS MS MS MS MS MS MS I have a strange problem with a client who has complained that MS **spam** is being put in the subject line of his outgoing emails. MS MS MS MS MS MS MS MS A quick check on the server logs (the declude logs) confirms that MS some of his emails are being passed through the spam tests and MS others are being whitelisted becasue he is an authenticated user. MS MS MS MS MS MS MS MS example (Skipping E-mail from authenticated user MS [EMAIL PROTECTED]@mydomain.com; whitelisted) MS MS MS MS MS MS MS MS I have checked his machine and he has everything set up perfectly MS including smtp authentication etc. MS MS MS MS MS MS MS MS Why would some email be run through declude and other not? MS MS MS MS MS MS MS MS I am using IMAIL 8.11, Declude 4 (security suite) MS MS MS MS MS MS MS Kindest Regards MS Craig Edmonds MS 123 Marbella Internet MS W:
RE: [Declude.JunkMail] Declude Crashes
Sorry, but your email was not treated as confidential. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Strother Sent: Monday, August 28, 2006 4:48 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Declude Crashes Sensitivity: Confidential Does anyone else have problems with Declude crashing? Several times each day I see the following in our application event logs: Reporting queued error: faulting application decludeproc.exe, version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. Followed by this in the system logs: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1 milliseconds: Restart the service. It seems as though Declude restarts fine and we dont seem to suffer any ill effects but Id like to see it resolved. Were processing a fair volume of mail, 100,000+ messages per day. Were running Declude 4.3.7 with Sniffer but I can rule out Sniffer as being the issue as I disabled it temporarily and still saw these errors. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Monday, August 28, 2006 2:41 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Importance: High Sensitivity: Confidential Thanks John, I had the log mode set to high, debug seems to show a lot more detail. Anything in particular I should look out for? (in debug mode the log can chuck out more than 300 lines!!!) Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Monday, August 28, 2006 7:25 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Sensitivity: Confidential You need to review the log lines of a message that was marked, not one that shows Whitelisted. Preferably, the log should be in debug mode. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Monday, August 28, 2006 9:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Importance: High Sensitivity: Confidential Hi All, I have a strange problem with a client who has complained that **spam** is being put in the subject line of his outgoing emails. A quick check on the server logs (the declude logs) confirms that some of his emails are being passed through the spam tests and others are being whitelisted becasue he is an authenticated user. example (Skipping E-mail from authenticated user [EMAIL PROTECTED]@mydomain.com; whitelisted) I have checked his machine and he has everything set up perfectly including smtp authentication etc. Why would some email be run through declude and other not? I am using IMAIL 8.11, Declude 4 (security suite) Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The
Re: [Declude.JunkMail] Declude Crashes
Mark, I also have those issues. However, my decludeproc is set to auto restart. On several occasions I have tested the files in the review folder to see if they are the culprit (i.e killer message) and never made any headway on it. It has not been too much of an issue since it restarts itself. The only downside is that you run the risk of legit mail ending up in the review folder. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Mark Strother To: declude.junkmail@declude.com Sent: Monday, August 28, 2006 7:47 PM Subject: [Declude.JunkMail] Declude Crashes Does anyone else have problems with Declude crashing? Several times each day I see the following in our application event logs: Reporting queued error: faulting application decludeproc.exe, version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. Followed by this in the system logs: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1 milliseconds: Restart the service. It seems as though Declude restarts fine and we dont seem to suffer any ill effects but Id like to see it resolved. Were processing a fair volume of mail, 100,000+ messages per day. Were running Declude 4.3.7 with Sniffer but I can rule out Sniffer as being the issue as I disabled it temporarily and still saw these errors. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Monday, August 28, 2006 2:41 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticatedImportance: HighSensitivity: Confidential Thanks John, I had the log mode set to high, debug seems to show a lot more detail. Anything in particular I should look out for? (in debug mode the log can chuck out more than 300 lines!!!) Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)Sent: Monday, August 28, 2006 7:25 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticatedSensitivity: Confidential You need to review the log lines of a message that was marked, not one that shows Whitelisted. Preferably, the log should be in debug mode. John T eServices For You "Seek, and ye shall find!" -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Monday, August 28, 2006 9:45 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] some emails being marked with **spam** despite being authenticatedImportance: HighSensitivity: Confidential Hi All, I have a strange problem with a client who has complained that **spam** is being put in the subject line of his outgoing emails. A quick check on the server logs (the declude logs) confirms that some of his emails are being passed through the spam tests and others are being whitelisted becasue he is an authenticated user. example (Skipping E-mail from authenticated user [EMAIL PROTECTED]@mydomain.com; whitelisted) I have checked his machine and he has everything set up perfectly including smtp authentication etc. Why would some email be run through declude and other not? I am using IMAIL 8.11, Declude 4 (security suite)
RE: [Declude.JunkMail] Declude Crashes
Darrell, I have a script that is scheduled to run every 15 minutes to check for any files in the error or review folders. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, August 28, 2006 5:18 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude Crashes Mark, I also have those issues. However, my decludeproc is set to auto restart. On several occasions I have tested the files in the review folder to see if they are the culprit (i.e killer message) and never made any headway on it. It has not been too much of an issue since it restarts itself. The only downside is that you run the risk of legit mail ending up in the review folder. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Mark Strother To: declude.junkmail@declude.com Sent: Monday, August 28, 2006 7:47 PM Subject: [Declude.JunkMail] Declude Crashes Does anyone else have problems with Declude crashing? Several times each day I see the following in our application event logs: Reporting queued error: faulting application decludeproc.exe, version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. Followed by this in the system logs: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1 milliseconds: Restart the service. It seems as though Declude restarts fine and we dont seem to suffer any ill effects but Id like to see it resolved. Were processing a fair volume of mail, 100,000+ messages per day. Were running Declude 4.3.7 with Sniffer but I can rule out Sniffer as being the issue as I disabled it temporarily and still saw these errors. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Monday, August 28, 2006 2:41 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Importance: High Sensitivity: Confidential Thanks John, I had the log mode set to high, debug seems to show a lot more detail. Anything in particular I should look out for? (in debug mode the log can chuck out more than 300 lines!!!) Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Monday, August 28, 2006 7:25 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Sensitivity: Confidential You need to review the log lines of a message that was marked, not one that shows Whitelisted. Preferably, the log should be in debug mode. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Monday, August 28, 2006 9:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Importance: High Sensitivity: Confidential Hi All, I have a strange problem with a client who has complained that **spam** is being put in the subject line of his outgoing emails. A quick check on the server logs (the declude logs) confirms that some of his emails are being passed through the spam tests and others are being whitelisted becasue he is an authenticated user. example (Skipping E-mail from authenticated user [EMAIL PROTECTED]@mydomain.com; whitelisted
RE: [Declude.JunkMail] Declude Crashes
I had this problem a while ago and never really got an answer on it. I too had a script that would check the review directory and then let me know if there were files there. I reprocessed them manually to check for killer messages (just like Darrell) and never found one. I finally resorted to # Email in the \review directory is automatically moved to the \proc directory when the service # starts or when the proc directory is empty AUTOREVIEW ON In my DECLUDE.CFG file. That way I could stop checking the messages. Never did find the problem. Goran Jovanovic Omega Network Solutions From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Monday, August 28, 2006 8:55 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude Crashes Darrell, I have a script that is scheduled to run every 15 minutes to check for any files in the error or review folders. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, August 28, 2006 5:18 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude Crashes Mark, I also have those issues. However, my decludeproc is set to auto restart. On several occasions I have tested the files in the review folder to see if they are the culprit (i.e killer message) and never made any headway on it. It has not been too much of an issue since it restarts itself. The only downside is that you run the risk of legit mail ending up in the review folder. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Mark Strother To: declude.junkmail@declude.com Sent: Monday, August 28, 2006 7:47 PM Subject: [Declude.JunkMail] Declude Crashes Does anyone else have problems with Declude crashing? Several times each day I see the following in our application event logs: Reporting queued error: faulting application decludeproc.exe, version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. Followed by this in the system logs: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1 milliseconds: Restart the service. It seems as though Declude restarts fine and we dont seem to suffer any ill effects but Id like to see it resolved. Were processing a fair volume of mail, 100,000+ messages per day. Were running Declude 4.3.7 with Sniffer but I can rule out Sniffer as being the issue as I disabled it temporarily and still saw these errors. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Monday, August 28, 2006 2:41 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Importance: High Sensitivity: Confidential Thanks John, I had the log mode set to high, debug seems to show a lot more detail. Anything in particular I should look out for? (in debug mode the log can chuck out more than 300 lines!!!) Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Monday, August 28, 2006 7:25 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated Sensitivity: Confidential You need to review the log lines of a message that was marked, not one that shows Whitelisted. Preferably, the log should be in debug mode. John T eServices For You
Re: [Declude.JunkMail] Declude Crashes
Thanks Goran, I will turn that on - had no idea that was an option. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Goran Jovanovic To: declude.junkmail@declude.com Sent: Monday, August 28, 2006 9:56 PM Subject: RE: [Declude.JunkMail] Declude Crashes I had this problem a while ago and never really got an answer on it. I too had a script that would check the review directory and then let me know if there were files there. I reprocessed them manually to check for killer messages (just like Darrell) and never found one. I finally resorted to # Email in the \review directory is automatically moved to the \proc directory when the service # starts or when the proc directory is empty AUTOREVIEW ON In my DECLUDE.CFG file. That way I could stop checking the messages. Never did find the problem. Goran Jovanovic Omega Network Solutions From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)Sent: Monday, August 28, 2006 8:55 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Declude Crashes Darrell, I have a script that is scheduled to run every 15 minutes to check for any files in the error or review folders. John T eServices For You "Seek, and ye shall find!" -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])Sent: Monday, August 28, 2006 5:18 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] Declude Crashes Mark, I also have those issues. However, my decludeproc is set to auto restart. On several occasions I have tested the files in the review folder to see if they are the culprit (i.e killer message) and never made any headway on it. It has not been too much of an issue since it restarts itself. The only downside is that you run the risk of legit mail ending up in the review folder. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Mark Strother To: declude.junkmail@declude.com Sent: Monday, August 28, 2006 7:47 PM Subject: [Declude.JunkMail] Declude Crashes Does anyone else have problems with Declude crashing? Several times each day I see the following in our application event logs: Reporting queued error: faulting application decludeproc.exe, version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. Followed by this in the system logs: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1 milliseconds: Restart the service. It seems as though Declude restarts fine and we dont seem to suffer any ill effects but Id like to see it resolved. Were processing a fair volume of mail, 100,000+ messages per day. Were running Declude 4.3.7 with Sniffer but I can rule out Sniffer as being the issue as I disabled it temporarily and still saw these errors. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Monday, August 28, 2006 2:41 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticatedImportance: HighSensitivity: Confidential Thanks John, I had the log mode set to high, debug seems to show a lot more detail. Anything in particular I should look out for? (in debug mode the log can chuck out more than 300 lines!!!) Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action i
Re: [Declude.JunkMail] Declude Crashes
Goran, That worked great for me until I experienced a killer message last week that AUTOREVIEW was throwing back into the proc directory after every restart which in turn caused Declude to crash every time. They said that this was fixed in the most recent version, but there are more bugs with their own killer messages out there certainly. AUTOREVIEW ON therefore should not be used for that reason. Keep in mind that not all messages that caused a crash will be repeatable causes of a crash. What I would like to see (and I'm not holding my breath) is something that didn't move all the proc contents into the review directory, but instead just the message that was there when it crashed. My GP1 file that was created by the crash as well as the logs clearly showed the problematic message. If Declude can create the GP1 file, it can also be made to only move that one problematic message over to review. I'm afraid that they are casting the net too widely. The protective measure of moving killer messages out of proc is wise, but designing a process that requires constant attention and maintenance to move messages back causes people to disable these protective measures. So the process should be changed to be more granular. With that said, I still would rather see the long known outstanding bugs addressed first. Clearly there has been a decision to ignore our concerns about these bugs and work on the gateway. That's an unfortunate way to deal with ones customers. Matt Goran Jovanovic wrote: I had this problem a while ago and never really got an answer on it. I too had a script that would check the review directory and then let me know if there were files there. I reprocessed them manually to check for killer messages (just like Darrell) and never found one. I finally resorted to # Email in the \review directory is automatically moved to the \proc directory when the service # starts or when the proc directory is empty AUTOREVIEW ON In my DECLUDE.CFG file. That way I could stop checking the messages. Never did find the problem. Goran Jovanovic Omega Network Solutions From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John T (Lists) Sent: Monday, August 28, 2006 8:55 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude Crashes Darrell, I have a script that is scheduled to run every 15 minutes to check for any files in the error or review folders. John T eServices For You "Seek, and ye shall find!" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, August 28, 2006 5:18 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude Crashes Mark, I also have those issues. However, my decludeproc is set to auto restart. On several occasions I have tested the files in the review folder to see if they are the culprit (i.e killer message) and never made any headway on it. It has not been too much of an issue since it restarts itself. The only downside is that you run the risk of legit mail ending up in the review folder. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Mark Strother To: declude.junkmail@declude.com Sent: Monday, August 28, 2006 7:47 PM Subject: [Declude.JunkMail] Declude Crashes Does anyone else have problems with Declude crashing? Several times each day I see the following in our application event logs: Reporting queued error: faulting application decludeproc.exe, version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. Followed by this in the system logs: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1 milliseconds: Restart the service. It seems as though Declude restarts fine and we dont seem to suffer any ill effects but Id like to see it resolved. Were processing a fair volume of mail, 100,000+ messages per day. Were running Declude 4.3.7 with Sniffer but I can rule out Sniffer as being the issue as I disabled it temporarily and still saw these errors. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Craig Edmonds Sent: Monday, August 28, 2006 2:41 PM To: declude.junkmail@declude.com
RE: [Declude.JunkMail] Declude Crashes
Matt, I agree with your comments regarding AUTOREVIEW and its potential problems. I originally started out manually checking an moving but that got too time consuming and seeming to no effect. Therefore I made a calculated risk that I would turn it on and take the chance of a killer message being looped. If that happens my proc directory will backup and Queuemon will notify me of a problem. So not elegant but it seems to work for me. Goran Jovanovic Omega Network Solutions From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, August 28, 2006 10:33 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude Crashes Goran, That worked great for me until I experienced a killer message last week that AUTOREVIEW was throwing back into the proc directory after every restart which in turn caused Declude to crash every time. They said that this was fixed in the most recent version, but there are more bugs with their own killer messages out there certainly. AUTOREVIEW ON therefore should not be used for that reason. Keep in mind that not all messages that caused a crash will be repeatable causes of a crash. What I would like to see (and I'm not holding my breath) is something that didn't move all the proc contents into the review directory, but instead just the message that was there when it crashed. My GP1 file that was created by the crash as well as the logs clearly showed the problematic message. If Declude can create the GP1 file, it can also be made to only move that one problematic message over to review. I'm afraid that they are casting the net too widely. The protective measure of moving killer messages out of proc is wise, but designing a process that requires constant attention and maintenance to move messages back causes people to disable these protective measures. So the process should be changed to be more granular. With that said, I still would rather see the long known outstanding bugs addressed first. Clearly there has been a decision to ignore our concerns about these bugs and work on the gateway. That's an unfortunate way to deal with ones customers. Matt Goran Jovanovic wrote: I had this problem a while ago and never really got an answer on it. I too had a script that would check the review directory and then let me know if there were files there. I reprocessed them manually to check for killer messages (just like Darrell) and never found one. I finally resorted to # Email in the \review directory is automatically moved to the \proc directory when the service # starts or when the proc directory is empty AUTOREVIEW ON In my DECLUDE.CFG file. That way I could stop checking the messages. Never did find the problem. Goran Jovanovic Omega Network Solutions From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John T (Lists) Sent: Monday, August 28, 2006 8:55 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude Crashes Darrell, I have a script that is scheduled to run every 15 minutes to check for any files in the error or review folders. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, August 28, 2006 5:18 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude Crashes Mark, I also have those issues. However, my decludeproc is set to auto restart. On several occasions I have tested the files in the review folder to see if they are the culprit (i.e killer message) and never made any headway on it. It has not been too much of an issue since it restarts itself. The only downside is that you run the risk of legit mail ending up in the review folder. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Mark Strother To: declude.junkmail@declude.com Sent: Monday, August 28, 2006 7:47 PM Subject: [Declude.JunkMail] Declude Crashes Does anyone else have problems with Declude crashing? Several times each day I see the following in our application event logs: Reporting queued error: faulting application decludeproc.exe, version 0.0.0.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x00032335. Followed by this in the system logs: The Decludeproc service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 1 milliseconds: Restart the service. It seems as though Declude restarts fine and we dont seem to suffer any ill effects but Id like to see it resolved. Were processing a fair volume of mail
