RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-18 Thread Will
Just to clarify...  If Imail was not processing, wouldn't the buildup be
occurring in the /spool directory itself?  Would declude also be
affected by such an issue and cause a buildup in the /spool/proc folder?

I ask, because my mail is getting built up in the /spool/proc folder,
not the /spool folder.  As I understand it, declude.exe deposits mail
into the /spool/proc folder.  The decludeproc.exe server runs to move
mail out of this folder into the /spool/proc/work folder for processing
and once completed moves it to the /spool folder so Imail may deliver
it.  Am I missing something?

This also doesn't explain why no outgoing DNS queries are allowed while
these issues are occurring, such as nslookup (unable to even establish a
connection to any DNS server), but once again work when the
decludeproc.exe is restarted.  To clarify, I am not restarting or
changing Imail services in any way.  My one and only step to resolve the
issue is to stop decludeproc.exe and restart it in services.  Nothing
else needs to be done.  This is the only service I need to touch.

I am more than happy to try modifying my setup as a form of
troubleshooting, but forgive me for trying to understand the reasoning
behind it.

Will




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Wednesday, January 18, 2006 7:14 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] decludeproc causing dns queries to fail

Will,

It is possible that this is not a Declude issue.

We had a similar problem years ago with an earlier version of Imail,
even 
before we began using Declude. It turned out that there has been an
ongoing 
bug in Imail about the entry of multiple DNS servers into the SMTP setup

page. They say you can enter several IPs separated by spaces, but if you
do 
this, IMail occasionally gets confused and basically stops looking at
DNS 
entirely. This results in quick buildup in the spool and the kind of 
problems you describe.

The cure is to run cache-only DNS locally on the server. Just install
the 
service, set it for Automatic, turn it on, point IMail to 127.0.0.1,an 
stop/start the IMail SMTP service. This will result in improved
performance 
because all your DNS lookups won't go over your network. You can point
the 
local DNS to your other servers by entering their addresses into DNS in
the 
Network | TCP/IP property sheet.

-Dave Doherty
 Skywaves, Inc. 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-18 Thread David Barker
Will,

When this happens again could you try start/stopping the queue manager and
smtp services in Imail to see if it resolves the issue of not being able to
connect to the DNS server.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Wednesday, January 18, 2006 3:49 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail

Just to clarify...  If Imail was not processing, wouldn't the buildup be
occurring in the /spool directory itself?  Would declude also be affected by
such an issue and cause a buildup in the /spool/proc folder?

I ask, because my mail is getting built up in the /spool/proc folder, not
the /spool folder.  As I understand it, declude.exe deposits mail into the
/spool/proc folder.  The decludeproc.exe server runs to move mail out of
this folder into the /spool/proc/work folder for processing and once
completed moves it to the /spool folder so Imail may deliver it.  Am I
missing something?

This also doesn't explain why no outgoing DNS queries are allowed while
these issues are occurring, such as nslookup (unable to even establish a
connection to any DNS server), but once again work when the decludeproc.exe
is restarted.  To clarify, I am not restarting or changing Imail services in
any way.  My one and only step to resolve the issue is to stop
decludeproc.exe and restart it in services.  Nothing else needs to be done.
This is the only service I need to touch.

I am more than happy to try modifying my setup as a form of troubleshooting,
but forgive me for trying to understand the reasoning behind it.

Will




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Wednesday, January 18, 2006 7:14 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] decludeproc causing dns queries to fail

Will,

It is possible that this is not a Declude issue.

We had a similar problem years ago with an earlier version of Imail, even
before we began using Declude. It turned out that there has been an ongoing
bug in Imail about the entry of multiple DNS servers into the SMTP setup

page. They say you can enter several IPs separated by spaces, but if you do
this, IMail occasionally gets confused and basically stops looking at DNS
entirely. This results in quick buildup in the spool and the kind of
problems you describe.

The cure is to run cache-only DNS locally on the server. Just install the
service, set it for Automatic, turn it on, point IMail to 127.0.0.1,an
stop/start the IMail SMTP service. This will result in improved performance
because all your DNS lookups won't go over your network. You can point the
local DNS to your other servers by entering their addresses into DNS in the
Network | TCP/IP property sheet.

-Dave Doherty
 Skywaves, Inc. 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-18 Thread Harvey Rench
Will, we have been having the same problem for months now with no 
resolution from Declude.
They have told me they have never seen this problem before. It is 
nice to know we are not the only ones but, yet I feel your pain.



If you come across something please let us know and we will do likewise.


Thanks,
Harvey



At 03:49 PM 1/18/2006, Will wrote:

Just to clarify...  If Imail was not processing, wouldn't the buildup be
occurring in the /spool directory itself?  Would declude also be
affected by such an issue and cause a buildup in the /spool/proc folder?

I ask, because my mail is getting built up in the /spool/proc folder,
not the /spool folder.  As I understand it, declude.exe deposits mail
into the /spool/proc folder.  The decludeproc.exe server runs to move
mail out of this folder into the /spool/proc/work folder for processing
and once completed moves it to the /spool folder so Imail may deliver
it.  Am I missing something?

This also doesn't explain why no outgoing DNS queries are allowed while
these issues are occurring, such as nslookup (unable to even establish a
connection to any DNS server), but once again work when the
decludeproc.exe is restarted.  To clarify, I am not restarting or
changing Imail services in any way.  My one and only step to resolve the
issue is to stop decludeproc.exe and restart it in services.  Nothing
else needs to be done.  This is the only service I need to touch.

I am more than happy to try modifying my setup as a form of
troubleshooting, but forgive me for trying to understand the reasoning
behind it.

Will




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Wednesday, January 18, 2006 7:14 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] decludeproc causing dns queries to fail

Will,

It is possible that this is not a Declude issue.

We had a similar problem years ago with an earlier version of Imail,
even
before we began using Declude. It turned out that there has been an
ongoing
bug in Imail about the entry of multiple DNS servers into the SMTP setup

page. They say you can enter several IPs separated by spaces, but if you
do
this, IMail occasionally gets confused and basically stops looking at
DNS
entirely. This results in quick buildup in the spool and the kind of
problems you describe.

The cure is to run cache-only DNS locally on the server. Just install
the
service, set it for Automatic, turn it on, point IMail to 127.0.0.1,an
stop/start the IMail SMTP service. This will result in improved
performance
because all your DNS lookups won't go over your network. You can point
the
local DNS to your other servers by entering their addresses into DNS in
the
Network | TCP/IP property sheet.

-Dave Doherty
 Skywaves, Inc.


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.




Confidentiality Notice
This message and the accompanying documents may contain information that is 
privileged, confidential, or exempt from disclosure under applicable law.  If 
the reader of this e-mail is not the intended recipient, you are hereby 
notified that you are strictly prohibited from reading, disseminating, 
distributing, or copying this communication.  If you have received this e-mail 
in error, please notify the sender immediately and destroy the original 
transmission. Thank you.
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-18 Thread Kevin Bilbee
Does the DNS stop about every 2 1/2 days. If so turn off monitoring of the
web service in the imail monitor. You will probably find a slew of TCI/IP
ports in the WAIT state. Run netstat -an from a command prompt when having
the problem.



Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of Will
 Sent: Wednesday, January 18, 2006 12:49 PM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] decludeproc causing dns 
 queries to fail
 
 
 Just to clarify...  If Imail was not processing, wouldn't the 
 buildup be occurring in the /spool directory itself?  Would 
 declude also be affected by such an issue and cause a buildup 
 in the /spool/proc folder?
 
 I ask, because my mail is getting built up in the /spool/proc 
 folder, not the /spool folder.  As I understand it, 
 declude.exe deposits mail into the /spool/proc folder.  The 
 decludeproc.exe server runs to move mail out of this folder 
 into the /spool/proc/work folder for processing and once 
 completed moves it to the /spool folder so Imail may deliver 
 it.  Am I missing something?
 
 This also doesn't explain why no outgoing DNS queries are 
 allowed while these issues are occurring, such as nslookup 
 (unable to even establish a connection to any DNS server), 
 but once again work when the decludeproc.exe is restarted.  
 To clarify, I am not restarting or changing Imail services in 
 any way.  My one and only step to resolve the issue is to 
 stop decludeproc.exe and restart it in services.  Nothing 
 else needs to be done.  This is the only service I need to touch.
 
 I am more than happy to try modifying my setup as a form of 
 troubleshooting, but forgive me for trying to understand the 
 reasoning behind it.
 
 Will
 
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
 Sent: Wednesday, January 18, 2006 7:14 AM
 To: Declude.JunkMail@declude.com
 Subject: Re: [Declude.JunkMail] decludeproc causing dns 
 queries to fail
 
 Will,
 
 It is possible that this is not a Declude issue.
 
 We had a similar problem years ago with an earlier version of 
 Imail, even 
 before we began using Declude. It turned out that there has 
 been an ongoing 
 bug in Imail about the entry of multiple DNS servers into the 
 SMTP setup
 
 page. They say you can enter several IPs separated by spaces, 
 but if you do 
 this, IMail occasionally gets confused and basically stops 
 looking at DNS 
 entirely. This results in quick buildup in the spool and the kind of 
 problems you describe.
 
 The cure is to run cache-only DNS locally on the server. Just 
 install the 
 service, set it for Automatic, turn it on, point IMail to 
 127.0.0.1,an 
 stop/start the IMail SMTP service. This will result in 
 improved performance 
 because all your DNS lookups won't go over your network. You 
 can point the 
 local DNS to your other servers by entering their addresses 
 into DNS in the 
 Network | TCP/IP property sheet.
 
 -Dave Doherty
  Skywaves, Inc. 
 
 
 ---
 [This E-mail was scanned for viruses by Declude EVA www.declude.com]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude EVA www.declude.com]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-17 Thread David Barker
Will,

If Decludeproc was usurping network resources we should be aware of this
issue. However currently you are the only report of this incident. Please
make sure you are running the latest version of declude 3.0.5.23
 
Declude has sent out DNS requests and did not recieve responses from the DNS
server, this is an indication of a DNS issues with your Network.. 

1. Check your firewall and ensure Port 53 is open.
2. Check your Firewall/Router logs to make sure incoming DNS packets are not
being blocked
3. Check for potential Network problems
4. Check that you DNS is working correctly. 

If you find it to be one of these reasons listed above it is a DNS issue and
not a Declude issue. BTW this is posted in our Knowledge base.  

David B
www.declude.com



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Tuesday, January 17, 2006 9:22 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] decludeproc causing dns queries to fail



For the second time in a month I have come to work to find over 500,000
messages in my proc folder.  The cause is declude's inability to perform dns
queries, thus mail backlogs.  The reason declude cannot perform DNS queries
is that no outgoing traffic is being permitted on port 53.  The reason no
outgoing traffic is being permitted on port 53 is that decludeproc has
consumed the resources allocated to my network interface.  The fix for this
is relatively simple.  I stop the decludeproc service and restart it and all
is well.   

 

After the first occurrence, it was suggested that I enable winsockcleanup
documented as the following at declude.com:

WINSOCKCLEANUPON
Located in Declude.cfg. Some customers had issues related to their network
stack causing loss of functionality for basic network operations. The
default for this directive is OFF 

Now I've been fooled twice, so I guess shame on me.  Does anyone have a
suggestion that would help resolve this?  In the meantime I will be writing
a script to monitor the number of message in the proc folder and if it
reaches a certain threshold, will restart the decludeproc service.  I really
don't care for workarounds such as this, but I've gained a bad image over
these two occurrences and I cannot allow it to happen again.

 

Declude.cfg:

THREADS   100

WAITFORMAIL 5000

WINSOCKCLEANUP   ON 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-17 Thread Darrell \([EMAIL PROTECTED])



Now I've been fooled twice, so I guess shame on me.  Does anyone have a
suggestion that would help resolve this?  In the meantime I will be
writing a script to monitor the number of message in the proc folder and
if it reaches a certain threshold, will restart the decludeproc service.
I really don't care for workarounds such as this, but I've gained a bad
image over these two occurrences and I cannot allow it to happen again.


You might want to download our QueueMon application.  Its a windows service 
that will monitor your spool folder and the Declude proc directory.  You can 
configure thresholds and have it notify you as well as allow you to run a 
script to restart the declude proc service when the thresholds are exceeded. 
It has a 30 day free trial - this should cover you while you troubleshoot 
this issue and get it fixed. 

Darrell 


---
Check out http://www.invariantsystems.com for utilities for Declude, Imail, 
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers. 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-17 Thread Will
Thank you for the feedback.  There is no firewall between my mail server
and my DNS server.  The DNS server is running without issue and resolves
names just fine on all other workstations and servers even when the
issues on my mail server arise.  When the issue presents itself, the
mail server alone is unable to establish a connection to the DNS.
During the first instance, I verified multiple times that the DNS server
was resolving properly and noted that the mail server could not
establish a connection with any of the five DNS servers I tried.  After
the decludeproc service was restarted, I could once again establish the
connection for DNS and mail processing started again.  However, with
500k messages in queue it took less than a half hour for the problem to
happen again.  My solution at the time, which I am not happy with, was
to purge the proc folder.  Without such overhead it ran fine for weeks.

The second time this happened a few days ago, I verified all my pervious
findings.

I can guarantee with absolute certainty that there are no DNS issues at
the root of this problem.  The sole cause and solution lie with the
decludeproc service and its consumption of resources on my mail server.

I just wrote a program to monitor the number of files in the proc folder
and restart the decludeproc service if it exceeds 2000.  This will be
enough to ensure that this doesn't happen again, but I do wish to make
this issue known so it can be avoided or diagnosed in the future.

I am currently running Win2003/sp1, Imail 8.12 with declude pro 3.0.5.22
running spam and antivirus with f-prot. 

Will


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Tuesday, January 17, 2006 9:40 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail

Will,

If Decludeproc was usurping network resources we should be aware of this
issue. However currently you are the only report of this incident.
Please
make sure you are running the latest version of declude 3.0.5.23
 
Declude has sent out DNS requests and did not recieve responses from the
DNS
server, this is an indication of a DNS issues with your Network.. 

1. Check your firewall and ensure Port 53 is open.
2. Check your Firewall/Router logs to make sure incoming DNS packets are
not
being blocked
3. Check for potential Network problems
4. Check that you DNS is working correctly. 

If you find it to be one of these reasons listed above it is a DNS issue
and
not a Declude issue. BTW this is posted in our Knowledge base.  

David B
www.declude.com



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Tuesday, January 17, 2006 9:22 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] decludeproc causing dns queries to fail



For the second time in a month I have come to work to find over 500,000
messages in my proc folder.  The cause is declude's inability to perform
dns
queries, thus mail backlogs.  The reason declude cannot perform DNS
queries
is that no outgoing traffic is being permitted on port 53.  The reason
no
outgoing traffic is being permitted on port 53 is that decludeproc has
consumed the resources allocated to my network interface.  The fix for
this
is relatively simple.  I stop the decludeproc service and restart it and
all
is well.   

 

After the first occurrence, it was suggested that I enable
winsockcleanup
documented as the following at declude.com:

WINSOCKCLEANUPON
Located in Declude.cfg. Some customers had issues related to their
network
stack causing loss of functionality for basic network operations. The
default for this directive is OFF 

Now I've been fooled twice, so I guess shame on me.  Does anyone have a
suggestion that would help resolve this?  In the meantime I will be
writing
a script to monitor the number of message in the proc folder and if it
reaches a certain threshold, will restart the decludeproc service.  I
really
don't care for workarounds such as this, but I've gained a bad image
over
these two occurrences and I cannot allow it to happen again.

 

Declude.cfg:

THREADS   100

WAITFORMAIL 5000

WINSOCKCLEANUP   ON 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-17 Thread John Doyle



Will
I had 
the same problem a month or so ago. My issue turned out to be my firewall was 
preventing the mail server from going out. I have my DNS servers behind the 
firewall also. When this happens declude seems to hang on to some memory and it 
slowly consumes resourses. I allowed the mail server to get out and the problem 
went away. Check your firewall logs foryour mailservers ip address and see 
if you're getting blocked. I tried the winsockcleanup and that did not solve the 
problem. This problem came up with the upgrade to declude 3.X, the 
mail server and firewall have been running with the same settings for years with 
no problems. Sadly my logs were deleted before I realized this had solved my 
problem and I did not get the port blocked nor the destination ip address. 

John

-Original 
Message-From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]On Behalf Of 
WillSent: Tuesday, January 17, 2006 6:22 AMTo: 
Declude.JunkMail@declude.comSubject: [Declude.JunkMail] decludeproc 
causing dns queries to fail

  
  For the second time in a month I have 
  come to work to find over 500,000 messages in my proc folder. The cause 
  is decludes inability to perform dns queries, thus mail backlogs. The 
  reason declude cannot perform DNS queries is that no outgoing traffic is being 
  permitted on port 53. The reason no outgoing traffic is being permitted 
  on port 53 is that decludeproc has consumed the resources allocated to my 
  network interface. The fix for this is relatively simple. I stop 
  the decludeproc service and restart it and all is well. 
  
  
  After the first occurrence, it was 
  suggested that I enable winsockcleanup documented as the following at 
  declude.com:
  WINSOCKCLEANUP 
  ONLocated in Declude.cfg. Some customers had 
  issues related to their network stack causing loss of functionality for basic 
  network operations. The default for this directive is OFF 
  Now Ive been fooled twice, so I guess 
  shame on me. Does anyone have a suggestion that would help resolve 
  this? In the meantime I will be writing a script to monitor the number 
  of message in the proc folder and if it reaches a certain threshold, will 
  restart the decludeproc service. I really dont care for workarounds 
  such as this, but Ive gained a bad image over these two occurrences and I 
  cannot allow it to happen again.
  
  Declude.cfg:
  THREADS 
  100
  WAITFORMAIL 
  5000
  WINSOCKCLEANUP 
  ON 


RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-17 Thread Gary Steiner
I have the same configuration as you except I have SmarterMail instead of 
IMail.  The problem I run into is that sometimes Declude fails to make any IP4R 
tests, but SmarterMail catches the spam using the same IP4R tests.  I had this 
problem with version 2 and version 3.  I went through Declude support, but the 
issue was never resolved to my satisfaction.  I was told to use WINSOCKCLEANUP 
among other things, but that didn't solve the problem.  The volume of mail on 
my server is relatively low, so I never get the back up problem you describe, 
and the failure occurs so irregularly that I basically just gave up on it.  

Gary Steiner



  Original Message 
 From: Will [EMAIL PROTECTED]
 Sent: Tuesday, January 17, 2006 10:08 AM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail
 
 Thank you for the feedback.  There is no firewall between my mail server
 and my DNS server.  The DNS server is running without issue and resolves
 names just fine on all other workstations and servers even when the
 issues on my mail server arise.  When the issue presents itself, the
 mail server alone is unable to establish a connection to the DNS.
 During the first instance, I verified multiple times that the DNS server
 was resolving properly and noted that the mail server could not
 establish a connection with any of the five DNS servers I tried.  After
 the decludeproc service was restarted, I could once again establish the
 connection for DNS and mail processing started again.  However, with
 500k messages in queue it took less than a half hour for the problem to
 happen again.  My solution at the time, which I am not happy with, was
 to purge the proc folder.  Without such overhead it ran fine for weeks.
 
 The second time this happened a few days ago, I verified all my pervious
 findings.
 
 I can guarantee with absolute certainty that there are no DNS issues at
 the root of this problem.  The sole cause and solution lie with the
 decludeproc service and its consumption of resources on my mail server.
 
 I just wrote a program to monitor the number of files in the proc folder
 and restart the decludeproc service if it exceeds 2000.  This will be
 enough to ensure that this doesn't happen again, but I do wish to make
 this issue known so it can be avoided or diagnosed in the future.
 
 I am currently running Win2003/sp1, Imail 8.12 with declude pro 3.0.5.22
 running spam and antivirus with f-prot. 
 
 Will
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
 Sent: Tuesday, January 17, 2006 9:40 AM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail
 
 Will,
 
 If Decludeproc was usurping network resources we should be aware of this
 issue. However currently you are the only report of this incident.
 Please
 make sure you are running the latest version of declude 3.0.5.23
  
 Declude has sent out DNS requests and did not recieve responses from the
 DNS
 server, this is an indication of a DNS issues with your Network.. 
 
 1. Check your firewall and ensure Port 53 is open.
 2. Check your Firewall/Router logs to make sure incoming DNS packets are
 not
 being blocked
 3. Check for potential Network problems
 4. Check that you DNS is working correctly. 
 
 If you find it to be one of these reasons listed above it is a DNS issue
 and
 not a Declude issue. BTW this is posted in our Knowledge base.  
 
 David B
 www.declude.com
 
 
 
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Will
 Sent: Tuesday, January 17, 2006 9:22 AM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] decludeproc causing dns queries to fail
 
 
 
 For the second time in a month I have come to work to find over 500,000
 messages in my proc folder.  The cause is declude's inability to perform
 dns
 queries, thus mail backlogs.  The reason declude cannot perform DNS
 queries
 is that no outgoing traffic is being permitted on port 53.  The reason
 no
 outgoing traffic is being permitted on port 53 is that decludeproc has
 consumed the resources allocated to my network interface.  The fix for
 this
 is relatively simple.  I stop the decludeproc service and restart it and
 all
 is well.   
 
  
 
 After the first occurrence, it was suggested that I enable
 winsockcleanup
 documented as the following at declude.com:
 
 WINSOCKCLEANUPON
 Located in Declude.cfg. Some customers had issues related to their
 network
 stack causing loss of functionality for basic network operations. The
 default for this directive is OFF 
 
 Now I've been fooled twice, so I guess shame on me.  Does anyone have a
 suggestion that would help resolve this?  In the meantime I will be
 writing
 a script to monitor the number of message in the proc folder and if it
 reaches a certain threshold, will restart the decludeproc service.  I
 really