GFI
English Deutsch Français Italiano Nederlands Español
Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

GFi not scanning "This is spam email"

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> GFi not scanning "This is spam email" Page: [1]
Login
Message << Older Topic   Newer Topic >>
GFi not scanning "This is spam email" - 5.May2008 6:18:29 PM   
nhbill

 

Posts: 126
Joined: 21.Mar.2006
Status: offline
It has been working great now it won't scan at all. I've ran the test and it pass without a problem I've have initiated a manual scan but there is still email that have not been processed. What am I doing wrong?

thanks,
nhb
Post #: 1
RE: GFi not scanning "This is spam email" - 5.May2008 7:04:01 PM   
John Letourneau

 

Posts: 526
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
nhbill,

What type of messages are currently in your "This Is Spam" email folder?  How are you connecting to this folder?  If you go to GFI MailEssentials Configuration > Anti-Spam > Properties > Public Folder Scanning you can see how you are connecting.

_____________________________

Regards,
John Letourneau - Technical Support Representative
GFI Software - www.gfi.com

(in reply to nhbill)
Post #: 2
RE: GFi not scanning "This is spam email" - 5.May2008 7:18:51 PM   
nhbill

 

Posts: 126
Joined: 21.Mar.2006
Status: offline
quote:

ORIGINAL: John Letourneau

nhbill,

What type of messages are currently in your "This Is Spam" email folder?  How are you connecting to this folder?  If you go to GFI MailEssentials Configuration > Anti-Spam > Properties > Public Folder Scanning you can see how you are connecting.



I am connecting via IMAPI to exchange 2003.

Example of spam in the folder

-----Original Message-----
From: Helga Isaac [mailto:pta@foxnews.com]
Sent: Friday, April 04, 2008 12:20 PM
To: Ralph Kravitz
Subject: need to get out of debt

Reduce \/\/hatt You Owe by 50%. Get out of debt today!
Rêduce Ínterest & Monthly Päyments Easy, we willl shôw you how..
Free Quote in 10 Min.
http://www.freefromdebtjg.cn



Subject: get out of debt quick

Reduce What You Owe by 50%. Get out of debt todáay!
Reduce 1nterest & Monthly Payments Easy, we willl shoow you how..
Free Quoté in 10 Min.
http://www.freefromdebtjf.cn

(in reply to John Letourneau)
Post #: 3
RE: GFi not scanning "This is spam email" - 5.May2008 7:35:52 PM   
John Letourneau

 

Posts: 526
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
nhbill,

If you go to ..\Program Files\GFI\MailEssentials\DebugLogs and open PFolders.gfi_log.txt after hitting scan now scroll all the way to the bottom and see if you see anything that resembles this:

2008-05-05,19:31:59,500,3,"#00000580","#00000604","info   ","PFolders","ProcessInternal: calling ProcessFolder[http://meserver/public/GFI AntiSpam Folders/This is spam email]"
2008-05-05,19:31:59,500,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: >>"
2008-05-05,19:31:59,515,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: query[select * from "http://meserver/public/GFI AntiSpam Folders/This is spam email" where ("http://schemas.microsoft.com/mapi/proptag/x001A001E" = 'IPM.Note' OR "http://schemas.microsoft.com/mapi/proptag/x001A001E"='IPM.Post') AND "DAV:isfolder"=false]"
2008-05-05,19:31:59,515,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: opening url..."
2008-05-05,19:31:59,531,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: executing query..."
2008-05-05,19:31:59,765,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: starting enumeration..."
2008-05-05,19:31:59,859,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: there are items to enumerate..."
2008-05-05,19:32:02,484,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: finished enumeration"
2008-05-05,19:32:02,484,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: <<"

What we are looking for is the line that states "there are items to enumerate".  If you do not see this please drop a test message into the folder and hit scan now again.  Does the newly added message get processed?

_____________________________

Regards,
John Letourneau - Technical Support Representative
GFI Software - www.gfi.com

(in reply to nhbill)
Post #: 4
RE: GFi not scanning "This is spam email" - 6.May2008 10:50:14 AM   
nhbill

 

Posts: 126
Joined: 21.Mar.2006
Status: offline
quote:

ORIGINAL: John Letourneau

nhbill,

If you go to ..\Program Files\GFI\MailEssentials\DebugLogs and open PFolders.gfi_log.txt after hitting scan now scroll all the way to the bottom and see if you see anything that resembles this:




I don't see a PFolders.gfi_log.txt but I do see RPFolders.gfi_log.txt << I'm assuming this is the file.

(in reply to John Letourneau)
Post #: 5
RE: GFi not scanning "This is spam email" - 6.May2008 10:59:54 AM   
nhbill

 

Posts: 126
Joined: 21.Mar.2006
Status: offline
Nothing.....


quote:

ORIGINAL: John Letourneau

nhbill,

If you go to ..\Program Files\GFI\MailEssentials\DebugLogs and open PFolders.gfi_log.txt after hitting scan now scroll all the way to the bottom and see if you see anything that resembles this:

2008-05-05,19:31:59,500,3,"#00000580","#00000604","info   ","PFolders","ProcessInternal: calling ProcessFolder[http://meserver/public/GFI AntiSpam Folders/This is spam email]"
2008-05-05,19:31:59,500,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: >>"
2008-05-05,19:31:59,515,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: query[select * from "http://meserver/public/GFI AntiSpam Folders/This is spam email" where ("http://schemas.microsoft.com/mapi/proptag/x001A001E" = 'IPM.Note' OR "http://schemas.microsoft.com/mapi/proptag/x001A001E"='IPM.Post') AND "DAV:isfolder"=false]"
2008-05-05,19:31:59,515,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: opening url..."
2008-05-05,19:31:59,531,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: executing query..."
2008-05-05,19:31:59,765,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: starting enumeration..."
2008-05-05,19:31:59,859,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: there are items to enumerate..."
2008-05-05,19:32:02,484,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: finished enumeration"
2008-05-05,19:32:02,484,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: <<"

What we are looking for is the line that states "there are items to enumerate".  If you do not see this please drop a test message into the folder and hit scan now again.  Does the newly added message get processed?

(in reply to John Letourneau)
Post #: 6
RE: GFi not scanning "This is spam email" - 6.May2008 7:28:43 PM   
nhbill

 

Posts: 126
Joined: 21.Mar.2006
Status: offline
last message in the log file....

2008-05-05,14:04:47,843,3,"#000005b8","#00000f80","info   ","RPFolders","Init: appdir[C:\Program Files\GFI\MailEssentials\]"
2008-05-05,14:04:47,843,3,"#000005b8","#00000f80","info   ","RPFolders","Init: plugregkey[SOFTWARE\GFI\ME12\Attendant\rpfolders:8]"
2008-05-05,14:04:47,843,3,"#000005b8","#00000f80","info   ","RPFolders","Init: regroot[SOFTWARE\GFI\ME12]"
2008-05-05,14:04:47,843,3,"#000005b8","#00000f80","info   ","RPFolders","Init: connection string[C:\Program Files\GFI\MailEssentials\config.mdb]"
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: >>"
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: retrieving timeout value..."
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: retrieving enabled value..."
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: settings - interval[7200000], enabled[1], spamtokfile[C:\Program Files\GFI\MailEssentials\Data\spam_tmp.tok], hamtokfile[C:\Program Files\GFI\MailEssentials\Data\ham_tmp.tok]"
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: loading local domains..."
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: local domains loaded[5]"
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: <<"
2008-05-05,14:04:47,875,3,"#000005b8","#00000f80","info   ","RPFolders","Init: initial wait interval[600000]"
2008-05-05,14:04:47,875,3,"#000005b8","#00000f80","info   ","RPFolders","Init: namespace index[-1]"
2008-05-05,14:04:48,140,3,"#000005b8","#00000f80","info   ","RPFolders","Process: >>"
2008-05-05,14:04:48,140,3,"#000005b8","#00000f80","info   ","RPFolders","Process: entering initial wait state..."
2008-05-05,14:14:25,650,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: >>"

(in reply to nhbill)
Post #: 7
RE: GFi not scanning "This is spam email" - 7.May2008 10:06:24 AM   
Eddie.Hirko

 

Posts: 14
Joined: 29.Apr.2008
Status: offline
nhbill,

Unfortunately there's not enough information in that snippet to get to the bottom of your issue.  Please open a support ticket at http://crm.gfi.com/Customizations/SupportIssue/support.aspx?lcode=en and submit a full Troubleshooter output so we can help you resolve your issue.  Thank you very much!

_____________________________

Eddie Hirko
GFI Software

(in reply to nhbill)
Post #: 8
RE: GFi not scanning "This is spam email" - 7.May2008 11:55:22 AM   
nhbill

 

Posts: 126
Joined: 21.Mar.2006
Status: offline
Uploaded the troubleshoot - LocalCom Support.zip




quote:

ORIGINAL: Eddie.Hirko

nhbill,

Unfortunately there's not enough information in that snippet to get to the bottom of your issue.  Please open a support ticket at http://crm.gfi.com/Customizations/SupportIssue/support.aspx?lcode=en and submit a full Troubleshooter output so we can help you resolve your issue.  Thank you very much!

(in reply to Eddie.Hirko)
Post #: 9
RE: GFi not scanning "This is spam email" - 7.May2008 4:04:53 PM   
nhbill

 

Posts: 126
Joined: 21.Mar.2006
Status: offline
Problem solved....

Apparently when user forward email by selecting all the spam and forwarding it cause the folder This is spam email to hang thus preventing GFI from scanning it correctly. I could not delete the mail manually from This is spam email I had to delete the public folder and recreated it again and reboot the gfi server and now everything works fine.

After messing around with it more.....
It seems like any email that you can't delete form the This is spam email folder will cause GFI to not function correctly.

hope that makes sense

< Message edited by nhbill -- 7.May2008 4:37:59 PM >

(in reply to nhbill)
Post #: 10
RE: GFi not scanning "This is spam email" - 7.May2008 7:52:21 PM   
John Letourneau

 

Posts: 526
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
nhbill,

Thanks for letting us know what fixed this.

_____________________________

Regards,
John Letourneau - Technical Support Representative
GFI Software - www.gfi.com

(in reply to nhbill)
Post #: 11
RE: GFi not scanning "This is spam email" - 8.May2008 5:49:41 PM   
nhbill

 

Posts: 126
Joined: 21.Mar.2006
Status: offline
Got another problem. Manual scan works great but some reason the auto scan does not work.

(in reply to John Letourneau)
Post #: 12
RE: GFi not scanning "This is spam email" - 9.May2008 10:55:49 AM   
nhbill

 

Posts: 126
Joined: 21.Mar.2006
Status: offline
I've notice that msecatt.exe sit at 25% cpu usage and my weight.bsp files is only 25MB

(in reply to nhbill)
Post #: 13
Page:   [1]
All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP >> GFi not scanning "This is spam email" Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


   © 2008. All rights reserved. GFI Software Home Products Download Trials Support Ordering Site Map About Us Contact us
GFI solutions: Exchange anti spam filter - exchange anti virus - isa server - network vulnerability scanner - event log management - USB security software - exchange archiving - fax server software