GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

GFI or SMTP error?

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> GFI or SMTP error? Page: [1]
Login
Message << Older Topic   Newer Topic >>
GFI or SMTP error? - 28.Jan.2008 10:02:08 AM   
dstelley

 

Posts: 20
Joined: 11.Sep.2003
From: Irving
Status: offline
Each day, at least one, but often more than one message will get stuck in the queue directory. When this happens that message will get delivered over and over again untill I manually delete it from C:\Inetpub\mailroot\queue.

I have GFI Security and GFI essentials (latest versions) installed. So far I can't find any common denominater as to why this could happen.
Anyone seen this before?

Thanks
Post #: 1
RE: GFI or SMTP error? - 29.Jan.2008 5:30:44 AM   
sandro

 

Posts: 1345
Joined: 26.Jul.2007
Status: offline
Hello dstelley,

Did you examine these messages by opening them within Outlook?

Are these outbound or inbound emails?

Are these emails addressed to many recipients and are such emails large emails?

Regards

_____________________________

Sandro Pace
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to dstelley)
Post #: 2
RE: GFI or SMTP error? - 31.Jan.2008 3:14:52 PM   
dstelley

 

Posts: 20
Joined: 11.Sep.2003
From: Irving
Status: offline
In answer to your questions:
Did you examine these messages by opening them within Outlook? Outlook Express on the mail server - yes

Are these outbound or inbound emails?  - Always inbound

Are these emails addressed to many recipients and are such emails large emails?
- Many recipients, yes (20 or more)
- Usually they run around 600K

addendum, When they get "stuck" they will have made it to all of the intended recipients, but one will keep getting it over and over.

(in reply to dstelley)
Post #: 3
RE: GFI or SMTP error? - 4.Feb.2008 6:27:53 AM   
sandro

 

Posts: 1345
Joined: 26.Jul.2007
Status: offline
Hello dstelley,

Is it always the same user that keeps getting the same email?

How is this user accessing emails from Outlook?  Using POP3/ IMAP/ MAPI?

Regards

_____________________________

Sandro Pace
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to dstelley)
Post #: 4
RE: GFI or SMTP error? - 6.Feb.2008 7:26:36 AM   
hsterken

 

Posts: 6
Joined: 23.May2005
From: Gemert
Status: offline
Hi,

I'm having the same problem. We're running mail essentials 12.0 and Lotus Domino 6.5.3 on an IBM iSeries.
Our problem is with in- and outbound mail although outbound has happened only once or twice and inbound a couple of times a week. I can't find a common denominater either.
The number of recipients are 1 or 2 and the names are different. The size of the email varies from 28 to 1542 KB. As we are using Domino, our users access their mail through the Notesclient.

Regards,

Henk Sterken

(in reply to dstelley)
Post #: 5
RE: GFI or SMTP error? - 7.Feb.2008 3:46:44 AM   
sandro

 

Posts: 1345
Joined: 26.Jul.2007
Status: offline
Hello Henk,

Enable SMTP logging for IIS SMTP where MailEssentials is running.  Check what is happening within the logging there, and check whether you have multiple entries for the same email, being sent or received.

If there is no logging on the IIS SMTP machine showing this, then the issue might be on the Lotus Notes server.

Let us know how it goes.

Regards

_____________________________

Sandro Pace
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to hsterken)
Post #: 6
RE: GFI or SMTP error? - 7.Feb.2008 4:55:17 AM   
hsterken

 

Posts: 6
Joined: 23.May2005
From: Gemert
Status: offline
Hello Sandro,

In the SMTP logging I see multiple entries for the same email. The SMTP-conversation seems to go fine (HELO or EHLO, MAIL FROM, RCPT TO, DATA and QUIT). At first, we assumed a Domino issue, but when it happened on outbound mail that becomes unlikely as the W2K3 SMTP-server handles this.

Regards,

Henk Sterken

(in reply to dstelley)
Post #: 7
RE: GFI or SMTP error? - 7.Feb.2008 11:14:23 AM   
hsterken

 

Posts: 6
Joined: 23.May2005
From: Gemert
Status: offline
Hello Sandro,

This afternoon we had another inbound repeating message. I found the following in the SMTP-log:
It starts with these entries:
2008-02-07 14:01:06 212.204.192.18 firstfocus.nl SMTPSVC1 GMTITM007 10.57.27.157 0 EHLO - +firstfocus.nl 250 0 197 18 0 SMTP - - - -
2008-02-07 14:01:06 212.204.192.18 firstfocus.nl SMTPSVC1 GMTITM007 10.57.27.157 0 MAIL - +From:<prvs=19230f275f=jobtrack@callcenter4you.nl> 250 0 67 66 0 SMTP - - - -
2008-02-07 14:01:06 212.204.192.18 firstfocus.nl SMTPSVC1 GMTITM007 10.57.27.157 0 RCPT - +To:<sboonaerts@unidek.nl> 250 0 33 30 0 SMTP - - - -
2008-02-07 14:01:07 212.204.192.18 firstfocus.nl SMTPSVC1 GMTITM007 10.57.27.157 0 DATA - +<03c401c86991$8f198d50$6701a8c0@176002> 250 0 123 267931 954 SMTP - - - -
2008-02-07 14:01:07 212.204.192.18 firstfocus.nl SMTPSVC1 GMTITM007 10.57.27.157 0 QUIT - firstfocus.nl 240 1078 66 4 0 SMTP - - - -

After that, the following lines repeated every minute untill I removed the mail from the C:\Inetpub\mailroot\Queue-folder.
2008-02-07 14:01:19 10.57.27.1 OutboundConnectionResponse SMTPSVC1 GMTITM007 - 25 - - 220+NAOMI.UNIDEK.COM+ESMTP+Service+(Lotus+Domino+Release+6.5.5FP3)+ready+at+Thu,+7+Feb+2008+15:02:00++0100 0 0 106 0 16 SMTP - - - -
2008-02-07 14:01:19 10.57.27.1 OutboundConnectionCommand SMTPSVC1 GMTITM007 - 25 EHLO - mailcrh.unidek.nl 0 0 4 0 16 SMTP - - - -
2008-02-07 14:01:19 10.57.27.1 OutboundConnectionResponse SMTPSVC1 GMTITM007 - 25 - - 250-NAOMI.UNIDEK.COM+Hello+mailcrh.unidek.nl+([10.57.27.157]),+pleased+to+meet+you 0 0 82 0 16 SMTP - - - -
2008-02-07 14:01:19 10.57.27.1 OutboundConnectionCommand SMTPSVC1 GMTITM007 - 25 MAIL - FROM:<prvs=19230f275f=jobtrack@callcenter4you.nl> 0 0 4 0 94 SMTP - - - -
2008-02-07 14:01:19 10.57.27.1 OutboundConnectionResponse SMTPSVC1 GMTITM007 - 25 - - 250+prvs=19230f275f=jobtrack@callcenter4you.nl...+Sender+OK 0 0 59 0 94 SMTP - - - -
2008-02-07 14:01:19 10.57.27.1 OutboundConnectionCommand SMTPSVC1 GMTITM007 - 25 RCPT - TO:<sboonaerts@unidek.nl> 0 0 4 0 94 SMTP - - - -
2008-02-07 14:01:19 10.57.27.1 OutboundConnectionResponse SMTPSVC1 GMTITM007 - 25 - - 250+sboonaerts@unidek.nl...+Recipient+OK 0 0 40 0 94 SMTP - - - -
2008-02-07 14:01:19 10.57.27.1 OutboundConnectionCommand SMTPSVC1 GMTITM007 - 25 DATA - - 0 0 4 0 94 SMTP - - - -
2008-02-07 14:01:19 10.57.27.1 OutboundConnectionResponse SMTPSVC1 GMTITM007 - 25 - - 354+Enter+message,+end+with+"."+on+a+line+by+itself 0 0 51 0 94 SMTP - - - -

Regards,

Henk Sterken

(in reply to dstelley)
Post #: 8
RE: GFI or SMTP error? - 11.Feb.2008 5:06:28 AM   
sandro

 

Posts: 1345
Joined: 26.Jul.2007
Status: offline
Hello Henk,

When this issue occurs, restart the IIS Admin and SMTP service and see if the issue persists.

If it persists after restarting the above services, stop the GFI MailEssentials services temporarily and restart again the services above to see if the issue continues or not. 

This should help us determine whether the issue is being caused by MailEssentials or not.

Let us know how it goes.

Regards

_____________________________

Sandro Pace
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to hsterken)
Post #: 9
RE: GFI or SMTP error? - 11.Feb.2008 5:14:14 AM   
hsterken

 

Posts: 6
Joined: 23.May2005
From: Gemert
Status: offline
Hello Sandro,

I'll try this en report my findings.

Regards,

Henk Sterken

(in reply to sandro)
Post #: 10
RE: GFI or SMTP error? - 14.Feb.2008 3:33:33 AM   
hsterken

 

Posts: 6
Joined: 23.May2005
From: Gemert
Status: offline
Hello Sandro,

This morning we had a repeating incoming e-mail. Restarting the IIS-services had no effect. The e-mail kept repeating. Restarting the GFI-services had no effect either.
So far for determining who the cullprit is...

Regards,

Henk Sterken

(in reply to hsterken)
Post #: 11
RE: GFI or SMTP error? - 14.Feb.2008 4:24:31 AM   
sandro

 

Posts: 1345
Joined: 26.Jul.2007
Status: offline
Hello Henk,

Are you able to reproduce the issue when by asking some particular sender to send the same type of email that is generating this issue?

If yes, I believe the only way to determine whether it is MailEssentials or not, is to disable MailEssentials and try to reproduce the issue.

To unbind MailEssenitals run stop_snks.cmd found within the MailEssentials installation directory.  This will require an IIS restart.
To bind MailEssentials back, after you have tried reproducing the issue run start_snks.cmd.

Note: When you unbind MailEssentials, you would not have antispam scanning, hence spam would pass through undetected.

Regards

< Message edited by sandro -- 14.Feb.2008 4:25:46 AM >


_____________________________

Sandro Pace
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to hsterken)
Post #: 12
RE: GFI or SMTP error? - 14.Feb.2008 4:36:27 AM   
hsterken

 

Posts: 6
Joined: 23.May2005
From: Gemert
Status: offline
Hello Sandro,

I'll try. Might be difficult. If I do this during the day I could get lynched by angry users...

I'll be back. ( (c) A. Schwarzenegger)

Regards,

Henk Sterken

(in reply to sandro)
Post #: 13
RE: GFI or SMTP error? - 15.Feb.2008 6:12:16 AM   
sandro

 

Posts: 1345
Joined: 26.Jul.2007
Status: offline
Thanks Henk!

Will be waiting for your feedback.

Regards

_____________________________

Sandro Pace
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to hsterken)
Post #: 14
RE: GFI or SMTP error? - 9.Sep.2008 6:49:58 AM   
Pernax

 

Posts: 3
Joined: 31.Mar.2004
Status: offline
Hi to all.
I have the same problem (MS 10 , ME 12 and Lotus Domino Server 7.0.3) . I tried with stop_snks.cmd  also but the problem is not solved ... if someone have an idea i can try other ...

Excusme for my bad english and THX in advance

Sandro (another )


(in reply to sandro)
Post #: 15
Page:   [1]
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> GFI or SMTP error? Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2009. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - usb security software - exchange archiving - fax server software