RE: [Declude.JunkMail] decludeproc causing dns queries to fail
Just to clarify... If Imail was not processing, wouldn't the buildup be occurring in the /spool directory itself? Would declude also be affected by such an issue and cause a buildup in the /spool/proc folder? I ask, because my mail is getting built up in the /spool/proc folder, not the /spool folder. As I understand it, declude.exe deposits mail into the /spool/proc folder. The decludeproc.exe server runs to move mail out of this folder into the /spool/proc/work folder for processing and once completed moves it to the /spool folder so Imail may deliver it. Am I missing something? This also doesn't explain why no outgoing DNS queries are allowed while these issues are occurring, such as nslookup (unable to even establish a connection to any DNS server), but once again work when the decludeproc.exe is restarted. To clarify, I am not restarting or changing Imail services in any way. My one and only step to resolve the issue is to stop decludeproc.exe and restart it in services. Nothing else needs to be done. This is the only service I need to touch. I am more than happy to try modifying my setup as a form of troubleshooting, but forgive me for trying to understand the reasoning behind it. Will -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Wednesday, January 18, 2006 7:14 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] decludeproc causing dns queries to fail Will, It is possible that this is not a Declude issue. We had a similar problem years ago with an earlier version of Imail, even before we began using Declude. It turned out that there has been an ongoing bug in Imail about the entry of multiple DNS servers into the SMTP setup page. They say you can enter several IPs separated by spaces, but if you do this, IMail occasionally gets confused and basically stops looking at DNS entirely. This results in quick buildup in the spool and the kind of problems you describe. The cure is to run cache-only DNS locally on the server. Just install the service, set it for Automatic, turn it on, point IMail to 127.0.0.1,an stop/start the IMail SMTP service. This will result in improved performance because all your DNS lookups won't go over your network. You can point the local DNS to your other servers by entering their addresses into DNS in the Network | TCP/IP property sheet. -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] decludeproc causing dns queries to fail
Will, When this happens again could you try start/stopping the queue manager and smtp services in Imail to see if it resolves the issue of not being able to connect to the DNS server. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Wednesday, January 18, 2006 3:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail Just to clarify... If Imail was not processing, wouldn't the buildup be occurring in the /spool directory itself? Would declude also be affected by such an issue and cause a buildup in the /spool/proc folder? I ask, because my mail is getting built up in the /spool/proc folder, not the /spool folder. As I understand it, declude.exe deposits mail into the /spool/proc folder. The decludeproc.exe server runs to move mail out of this folder into the /spool/proc/work folder for processing and once completed moves it to the /spool folder so Imail may deliver it. Am I missing something? This also doesn't explain why no outgoing DNS queries are allowed while these issues are occurring, such as nslookup (unable to even establish a connection to any DNS server), but once again work when the decludeproc.exe is restarted. To clarify, I am not restarting or changing Imail services in any way. My one and only step to resolve the issue is to stop decludeproc.exe and restart it in services. Nothing else needs to be done. This is the only service I need to touch. I am more than happy to try modifying my setup as a form of troubleshooting, but forgive me for trying to understand the reasoning behind it. Will -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Wednesday, January 18, 2006 7:14 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] decludeproc causing dns queries to fail Will, It is possible that this is not a Declude issue. We had a similar problem years ago with an earlier version of Imail, even before we began using Declude. It turned out that there has been an ongoing bug in Imail about the entry of multiple DNS servers into the SMTP setup page. They say you can enter several IPs separated by spaces, but if you do this, IMail occasionally gets confused and basically stops looking at DNS entirely. This results in quick buildup in the spool and the kind of problems you describe. The cure is to run cache-only DNS locally on the server. Just install the service, set it for Automatic, turn it on, point IMail to 127.0.0.1,an stop/start the IMail SMTP service. This will result in improved performance because all your DNS lookups won't go over your network. You can point the local DNS to your other servers by entering their addresses into DNS in the Network | TCP/IP property sheet. -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] decludeproc causing dns queries to fail
Will, we have been having the same problem for months now with no resolution from Declude. They have told me they have never seen this problem before. It is nice to know we are not the only ones but, yet I feel your pain. If you come across something please let us know and we will do likewise. Thanks, Harvey At 03:49 PM 1/18/2006, Will wrote: Just to clarify... If Imail was not processing, wouldn't the buildup be occurring in the /spool directory itself? Would declude also be affected by such an issue and cause a buildup in the /spool/proc folder? I ask, because my mail is getting built up in the /spool/proc folder, not the /spool folder. As I understand it, declude.exe deposits mail into the /spool/proc folder. The decludeproc.exe server runs to move mail out of this folder into the /spool/proc/work folder for processing and once completed moves it to the /spool folder so Imail may deliver it. Am I missing something? This also doesn't explain why no outgoing DNS queries are allowed while these issues are occurring, such as nslookup (unable to even establish a connection to any DNS server), but once again work when the decludeproc.exe is restarted. To clarify, I am not restarting or changing Imail services in any way. My one and only step to resolve the issue is to stop decludeproc.exe and restart it in services. Nothing else needs to be done. This is the only service I need to touch. I am more than happy to try modifying my setup as a form of troubleshooting, but forgive me for trying to understand the reasoning behind it. Will -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Wednesday, January 18, 2006 7:14 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] decludeproc causing dns queries to fail Will, It is possible that this is not a Declude issue. We had a similar problem years ago with an earlier version of Imail, even before we began using Declude. It turned out that there has been an ongoing bug in Imail about the entry of multiple DNS servers into the SMTP setup page. They say you can enter several IPs separated by spaces, but if you do this, IMail occasionally gets confused and basically stops looking at DNS entirely. This results in quick buildup in the spool and the kind of problems you describe. The cure is to run cache-only DNS locally on the server. Just install the service, set it for Automatic, turn it on, point IMail to 127.0.0.1,an stop/start the IMail SMTP service. This will result in improved performance because all your DNS lookups won't go over your network. You can point the local DNS to your other servers by entering their addresses into DNS in the Network | TCP/IP property sheet. -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Confidentiality Notice This message and the accompanying documents may contain information that is privileged, confidential, or exempt from disclosure under applicable law. If the reader of this e-mail is not the intended recipient, you are hereby notified that you are strictly prohibited from reading, disseminating, distributing, or copying this communication. If you have received this e-mail in error, please notify the sender immediately and destroy the original transmission. Thank you. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] decludeproc causing dns queries to fail
Does the DNS stop about every 2 1/2 days. If so turn off monitoring of the web service in the imail monitor. You will probably find a slew of TCI/IP ports in the WAIT state. Run netstat -an from a command prompt when having the problem. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Wednesday, January 18, 2006 12:49 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail Just to clarify... If Imail was not processing, wouldn't the buildup be occurring in the /spool directory itself? Would declude also be affected by such an issue and cause a buildup in the /spool/proc folder? I ask, because my mail is getting built up in the /spool/proc folder, not the /spool folder. As I understand it, declude.exe deposits mail into the /spool/proc folder. The decludeproc.exe server runs to move mail out of this folder into the /spool/proc/work folder for processing and once completed moves it to the /spool folder so Imail may deliver it. Am I missing something? This also doesn't explain why no outgoing DNS queries are allowed while these issues are occurring, such as nslookup (unable to even establish a connection to any DNS server), but once again work when the decludeproc.exe is restarted. To clarify, I am not restarting or changing Imail services in any way. My one and only step to resolve the issue is to stop decludeproc.exe and restart it in services. Nothing else needs to be done. This is the only service I need to touch. I am more than happy to try modifying my setup as a form of troubleshooting, but forgive me for trying to understand the reasoning behind it. Will -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Wednesday, January 18, 2006 7:14 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] decludeproc causing dns queries to fail Will, It is possible that this is not a Declude issue. We had a similar problem years ago with an earlier version of Imail, even before we began using Declude. It turned out that there has been an ongoing bug in Imail about the entry of multiple DNS servers into the SMTP setup page. They say you can enter several IPs separated by spaces, but if you do this, IMail occasionally gets confused and basically stops looking at DNS entirely. This results in quick buildup in the spool and the kind of problems you describe. The cure is to run cache-only DNS locally on the server. Just install the service, set it for Automatic, turn it on, point IMail to 127.0.0.1,an stop/start the IMail SMTP service. This will result in improved performance because all your DNS lookups won't go over your network. You can point the local DNS to your other servers by entering their addresses into DNS in the Network | TCP/IP property sheet. -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] decludeproc causing dns queries to fail
Will, If Decludeproc was usurping network resources we should be aware of this issue. However currently you are the only report of this incident. Please make sure you are running the latest version of declude 3.0.5.23 Declude has sent out DNS requests and did not recieve responses from the DNS server, this is an indication of a DNS issues with your Network.. 1. Check your firewall and ensure Port 53 is open. 2. Check your Firewall/Router logs to make sure incoming DNS packets are not being blocked 3. Check for potential Network problems 4. Check that you DNS is working correctly. If you find it to be one of these reasons listed above it is a DNS issue and not a Declude issue. BTW this is posted in our Knowledge base. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Tuesday, January 17, 2006 9:22 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] decludeproc causing dns queries to fail For the second time in a month I have come to work to find over 500,000 messages in my proc folder. The cause is declude's inability to perform dns queries, thus mail backlogs. The reason declude cannot perform DNS queries is that no outgoing traffic is being permitted on port 53. The reason no outgoing traffic is being permitted on port 53 is that decludeproc has consumed the resources allocated to my network interface. The fix for this is relatively simple. I stop the decludeproc service and restart it and all is well. After the first occurrence, it was suggested that I enable winsockcleanup documented as the following at declude.com: WINSOCKCLEANUPON Located in Declude.cfg. Some customers had issues related to their network stack causing loss of functionality for basic network operations. The default for this directive is OFF Now I've been fooled twice, so I guess shame on me. Does anyone have a suggestion that would help resolve this? In the meantime I will be writing a script to monitor the number of message in the proc folder and if it reaches a certain threshold, will restart the decludeproc service. I really don't care for workarounds such as this, but I've gained a bad image over these two occurrences and I cannot allow it to happen again. Declude.cfg: THREADS 100 WAITFORMAIL 5000 WINSOCKCLEANUP ON --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] decludeproc causing dns queries to fail
Now I've been fooled twice, so I guess shame on me. Does anyone have a suggestion that would help resolve this? In the meantime I will be writing a script to monitor the number of message in the proc folder and if it reaches a certain threshold, will restart the decludeproc service. I really don't care for workarounds such as this, but I've gained a bad image over these two occurrences and I cannot allow it to happen again. You might want to download our QueueMon application. Its a windows service that will monitor your spool folder and the Declude proc directory. You can configure thresholds and have it notify you as well as allow you to run a script to restart the declude proc service when the thresholds are exceeded. It has a 30 day free trial - this should cover you while you troubleshoot this issue and get it fixed. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] decludeproc causing dns queries to fail
Thank you for the feedback. There is no firewall between my mail server and my DNS server. The DNS server is running without issue and resolves names just fine on all other workstations and servers even when the issues on my mail server arise. When the issue presents itself, the mail server alone is unable to establish a connection to the DNS. During the first instance, I verified multiple times that the DNS server was resolving properly and noted that the mail server could not establish a connection with any of the five DNS servers I tried. After the decludeproc service was restarted, I could once again establish the connection for DNS and mail processing started again. However, with 500k messages in queue it took less than a half hour for the problem to happen again. My solution at the time, which I am not happy with, was to purge the proc folder. Without such overhead it ran fine for weeks. The second time this happened a few days ago, I verified all my pervious findings. I can guarantee with absolute certainty that there are no DNS issues at the root of this problem. The sole cause and solution lie with the decludeproc service and its consumption of resources on my mail server. I just wrote a program to monitor the number of files in the proc folder and restart the decludeproc service if it exceeds 2000. This will be enough to ensure that this doesn't happen again, but I do wish to make this issue known so it can be avoided or diagnosed in the future. I am currently running Win2003/sp1, Imail 8.12 with declude pro 3.0.5.22 running spam and antivirus with f-prot. Will -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, January 17, 2006 9:40 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail Will, If Decludeproc was usurping network resources we should be aware of this issue. However currently you are the only report of this incident. Please make sure you are running the latest version of declude 3.0.5.23 Declude has sent out DNS requests and did not recieve responses from the DNS server, this is an indication of a DNS issues with your Network.. 1. Check your firewall and ensure Port 53 is open. 2. Check your Firewall/Router logs to make sure incoming DNS packets are not being blocked 3. Check for potential Network problems 4. Check that you DNS is working correctly. If you find it to be one of these reasons listed above it is a DNS issue and not a Declude issue. BTW this is posted in our Knowledge base. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Tuesday, January 17, 2006 9:22 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] decludeproc causing dns queries to fail For the second time in a month I have come to work to find over 500,000 messages in my proc folder. The cause is declude's inability to perform dns queries, thus mail backlogs. The reason declude cannot perform DNS queries is that no outgoing traffic is being permitted on port 53. The reason no outgoing traffic is being permitted on port 53 is that decludeproc has consumed the resources allocated to my network interface. The fix for this is relatively simple. I stop the decludeproc service and restart it and all is well. After the first occurrence, it was suggested that I enable winsockcleanup documented as the following at declude.com: WINSOCKCLEANUPON Located in Declude.cfg. Some customers had issues related to their network stack causing loss of functionality for basic network operations. The default for this directive is OFF Now I've been fooled twice, so I guess shame on me. Does anyone have a suggestion that would help resolve this? In the meantime I will be writing a script to monitor the number of message in the proc folder and if it reaches a certain threshold, will restart the decludeproc service. I really don't care for workarounds such as this, but I've gained a bad image over these two occurrences and I cannot allow it to happen again. Declude.cfg: THREADS 100 WAITFORMAIL 5000 WINSOCKCLEANUP ON --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] decludeproc causing dns queries to fail
Will I had the same problem a month or so ago. My issue turned out to be my firewall was preventing the mail server from going out. I have my DNS servers behind the firewall also. When this happens declude seems to hang on to some memory and it slowly consumes resourses. I allowed the mail server to get out and the problem went away. Check your firewall logs foryour mailservers ip address and see if you're getting blocked. I tried the winsockcleanup and that did not solve the problem. This problem came up with the upgrade to declude 3.X, the mail server and firewall have been running with the same settings for years with no problems. Sadly my logs were deleted before I realized this had solved my problem and I did not get the port blocked nor the destination ip address. John -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of WillSent: Tuesday, January 17, 2006 6:22 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] decludeproc causing dns queries to fail For the second time in a month I have come to work to find over 500,000 messages in my proc folder. The cause is decludes inability to perform dns queries, thus mail backlogs. The reason declude cannot perform DNS queries is that no outgoing traffic is being permitted on port 53. The reason no outgoing traffic is being permitted on port 53 is that decludeproc has consumed the resources allocated to my network interface. The fix for this is relatively simple. I stop the decludeproc service and restart it and all is well. After the first occurrence, it was suggested that I enable winsockcleanup documented as the following at declude.com: WINSOCKCLEANUP ONLocated in Declude.cfg. Some customers had issues related to their network stack causing loss of functionality for basic network operations. The default for this directive is OFF Now Ive been fooled twice, so I guess shame on me. Does anyone have a suggestion that would help resolve this? In the meantime I will be writing a script to monitor the number of message in the proc folder and if it reaches a certain threshold, will restart the decludeproc service. I really dont care for workarounds such as this, but Ive gained a bad image over these two occurrences and I cannot allow it to happen again. Declude.cfg: THREADS 100 WAITFORMAIL 5000 WINSOCKCLEANUP ON
RE: [Declude.JunkMail] decludeproc causing dns queries to fail
I have the same configuration as you except I have SmarterMail instead of IMail. The problem I run into is that sometimes Declude fails to make any IP4R tests, but SmarterMail catches the spam using the same IP4R tests. I had this problem with version 2 and version 3. I went through Declude support, but the issue was never resolved to my satisfaction. I was told to use WINSOCKCLEANUP among other things, but that didn't solve the problem. The volume of mail on my server is relatively low, so I never get the back up problem you describe, and the failure occurs so irregularly that I basically just gave up on it. Gary Steiner Original Message From: Will [EMAIL PROTECTED] Sent: Tuesday, January 17, 2006 10:08 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail Thank you for the feedback. There is no firewall between my mail server and my DNS server. The DNS server is running without issue and resolves names just fine on all other workstations and servers even when the issues on my mail server arise. When the issue presents itself, the mail server alone is unable to establish a connection to the DNS. During the first instance, I verified multiple times that the DNS server was resolving properly and noted that the mail server could not establish a connection with any of the five DNS servers I tried. After the decludeproc service was restarted, I could once again establish the connection for DNS and mail processing started again. However, with 500k messages in queue it took less than a half hour for the problem to happen again. My solution at the time, which I am not happy with, was to purge the proc folder. Without such overhead it ran fine for weeks. The second time this happened a few days ago, I verified all my pervious findings. I can guarantee with absolute certainty that there are no DNS issues at the root of this problem. The sole cause and solution lie with the decludeproc service and its consumption of resources on my mail server. I just wrote a program to monitor the number of files in the proc folder and restart the decludeproc service if it exceeds 2000. This will be enough to ensure that this doesn't happen again, but I do wish to make this issue known so it can be avoided or diagnosed in the future. I am currently running Win2003/sp1, Imail 8.12 with declude pro 3.0.5.22 running spam and antivirus with f-prot. Will -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, January 17, 2006 9:40 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail Will, If Decludeproc was usurping network resources we should be aware of this issue. However currently you are the only report of this incident. Please make sure you are running the latest version of declude 3.0.5.23 Declude has sent out DNS requests and did not recieve responses from the DNS server, this is an indication of a DNS issues with your Network.. 1. Check your firewall and ensure Port 53 is open. 2. Check your Firewall/Router logs to make sure incoming DNS packets are not being blocked 3. Check for potential Network problems 4. Check that you DNS is working correctly. If you find it to be one of these reasons listed above it is a DNS issue and not a Declude issue. BTW this is posted in our Knowledge base. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will Sent: Tuesday, January 17, 2006 9:22 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] decludeproc causing dns queries to fail For the second time in a month I have come to work to find over 500,000 messages in my proc folder. The cause is declude's inability to perform dns queries, thus mail backlogs. The reason declude cannot perform DNS queries is that no outgoing traffic is being permitted on port 53. The reason no outgoing traffic is being permitted on port 53 is that decludeproc has consumed the resources allocated to my network interface. The fix for this is relatively simple. I stop the decludeproc service and restart it and all is well. After the first occurrence, it was suggested that I enable winsockcleanup documented as the following at declude.com: WINSOCKCLEANUPON Located in Declude.cfg. Some customers had issues related to their network stack causing loss of functionality for basic network operations. The default for this directive is OFF Now I've been fooled twice, so I guess shame on me. Does anyone have a suggestion that would help resolve this? In the meantime I will be writing a script to monitor the number of message in the proc folder and if it reaches a certain threshold, will restart the decludeproc service. I really