Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

ME12 stopping mail flow through Exchange

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> ME12 stopping mail flow through Exchange Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
ME12 stopping mail flow through Exchange - 31.Mar.2006 3:36:17 PM   
jjohnston

 

Posts: 16
Joined: 23.Feb.2006
Status: offline
I have the latest build (20060308) of ME12 installed.  We were having problems where the "Messages pending submission" queue on our E2k3 server would randomly start filling up.  I would kill all services for GFI (both ME/MS are installed on the E2k3 server) and the queues would quickly empty out.  I actually uninstalled and reinstalled both apps fresh (renamed the GFI directory to GFI.OLD).  Then after reinstalling and copying all config databases back into the new install we would run into the same problem.

Soooo...I rebuilt our E2k3 server (which was very unpleasant).  Reinstalled everything fresh and ONLY copied over the *.mdb files in the main GFI directory, not the Data directory.  Everything was running great for about a week.  Then yesterday I reenabled the Bayesian filter and noticed today the above mentioned queue was again above 1000 messages.  I killed all services (anyone every notice you have to Disable the GFI Mail Scan service to keep it from restarting? ANNOYING) and magically within 5 seconds the queues empty out.  I restarted all services and made sure the Bayesian filter was not enabled, in addition to the Public Folder scanner.  Over the past hour all is well, who knows what it will be like in 24 more hours.

We've been very happy with GFI up until this point.  Spam software that lets through too much spam is OK, spam software that catches too many false positives is annoying, but OK, spam software that effectively KILLS all mail services: NOT OK!!!!  In addition, people are getting these messages outside of the company:

Please note that a critical failure occurred on the sender's messaging system at the virus scanning stage.

The sender should be notified and reference made to this tracking number: src53_failed_fb2bf721-7630-46df-a025-417b442f0862


Regards,

GFI Content Security.

 
What is that? PLEASE HELP!!!!!!!!
Post #: 1
RE: ME12 stopping mail flow through Exchange - 3.Apr.2006 7:13:29 AM   
Mark Busuttil

 

Posts: 4836
Joined: 16.Oct.2005
Status: offline
Hi JJohnston,

Can you please send us your troubleshooter files at your earliest convinience, for MailEssentials and MailSecurity.

The following Links describe the Procedure you must perform to generate these files:

1) MailSecurity -->  http://forums.gfi.com/Read_this_first/m_900727091/tm.htm
2) MailEssentials -->  http://forums.gfi.com/Read_this_first/m_900727096/tm.htm

It is critical that you reproduce the issue when debug is enabled and also send us a copy of the emails used to reproduce the issue in EML or MSG format

Thanks!

_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to jjohnston)
Post #: 2
RE: ME12 stopping mail flow through Exchange - 3.Apr.2006 10:38:48 AM   
jjohnston

 

Posts: 16
Joined: 23.Feb.2006
Status: offline
Reproducing this problem is not something I'm interested in doing on a production mail server.  Can I just wait until the problem occurs again and enable the debug at that time?  Is there not some other way than cratering my mail system that you can help with this problem?  It would certainly be appreciated!! :)

(in reply to Mark Busuttil)
Post #: 3
RE: ME12 stopping mail flow through Exchange - 3.Apr.2006 11:15:17 AM   
cmoorehsu

 

Posts: 3
Joined: 3.Apr.2006
Status: offline
I've had the exact same problem about 3 times, one of which was this morning (gotta love Monday's!!).  The first couple times it happened, I believe I was running ME11.  This last time was in ME12.

I didn't have time to gather the debug logs.  Now that I know what to do, hopefully next time I can provide those.

I have been able to figure what's causing it.  It's normally SPF and/or one of the DNS based checks.  I just go in and disable a few checks to try and figure out which one is hung.  Once I get the right combination, mail starts flowing again (although with fewer spam checks).

In the past, SPF is the biggest culprit.  I did have one instance where relays.ordb.org was offline.

To this point, I have been able to figure out exactly why it's happening.

(in reply to jjohnston)
Post #: 4
RE: ME12 stopping mail flow through Exchange - 4.Apr.2006 9:02:39 AM   
Mark Busuttil

 

Posts: 4836
Joined: 16.Oct.2005
Status: offline
Jjohnston,

The current build which you are running on has debug enabled by default. Can you please check if you currently have Tracing enabled under the GFI MailSecurity Switchboard in the Mailsecurity Program Group.

If you have Tracing enabled, can you please generate your troubleshooter files and send them over to forums@gfi.com

cmoorehsu,

We would also like to investigate this issue further, can you please generate the troubleshooter files when this issue re occurs

Thanks

_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to cmoorehsu)
Post #: 5
RE: ME12 stopping mail flow through Exchange - 4.Apr.2006 10:56:45 AM   
jjohnston

 

Posts: 16
Joined: 23.Feb.2006
Status: offline
I do have tracing enabled in Mail Security.  Does that also enable it for Mail Essentials?  I'm pretty sure that is the where the problem is.

(in reply to Mark Busuttil)
Post #: 6
RE: ME12 stopping mail flow through Exchange - 4.Apr.2006 11:25:34 AM   
jjohnston

 

Posts: 16
Joined: 23.Feb.2006
Status: offline
I have uploaded my files to the GFI ftp site.  They are in a folder named PDXINC.  There are 2 zip files.  One for MailSecurity named 20060404MS_PDXINC.zip and the other for MailEssentials named 20060404ME_PDXINC.zip.

Thanks for the help!

(in reply to Mark Busuttil)
Post #: 7
RE: ME12 stopping mail flow through Exchange - 4.Apr.2006 11:29:10 AM   
jjohnston

 

Posts: 16
Joined: 23.Feb.2006
Status: offline
One other thing to note is that my queues were backed up between 10:00 a.m. and 1:30 p.m. CST on Friday, March 31, 2006.  Hopefully this will be reflected in the debug logs!

(in reply to jjohnston)
Post #: 8
RE: ME12 stopping mail flow through Exchange - 5.Apr.2006 4:46:59 AM   
Mark Busuttil

 

Posts: 4836
Joined: 16.Oct.2005
Status: offline
Hi jjohnston,

We have created a support ticket for you, and sent you an email to the address you have registered to the forums with.

Thanks!

_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to jjohnston)
Post #: 9
RE: ME12 stopping mail flow through Exchange - 12.Apr.2006 11:17:18 AM   
jjohnston

 

Posts: 16
Joined: 23.Feb.2006
Status: offline
The mail server croaked on me again!  Thank you GFI!  This time I was able to run the troubleshooter while the problem was occurring.

It is in your ftp site in a folder called PDXINC_20060410.

(in reply to Mark Busuttil)
Post #: 10
RE: ME12 stopping mail flow through Exchange - 12.Apr.2006 11:22:15 AM   
jjohnston

 

Posts: 16
Joined: 23.Feb.2006
Status: offline
One thing I forgot to add to my last email: the solution!

When this happened to me this time, I turned my SPF filter off.  Within a few seconds the queues started emptying out.  I didn't have to restart ANY services, which was great as I didn't lose a single email message which is what has happened in the past with GFI hangs up my SMTP queue.

Anyways, maybe we're finally one step closer to getting this problem fixed PERMANENTLY!

(in reply to jjohnston)
Post #: 11
RE: ME12 stopping mail flow through Exchange - 12.Apr.2006 3:08:46 PM   
jmarin

 

Posts: 3
Joined: 10.Apr.2006
Status: offline
 
I was having the same issue but after playing with SPF and also changing the DNS blacklists selection it worked a little better but still slow and queues would still build up at certain times of the day, what has worked in my case was turning the new Phisning module off, I have not had the problem since (better knock on wood).  Hope this helps some of you until a better solution comes up.


I really agreed with your statement:

"Spam software that lets through too much spam is OK, spam software that catches too many false positives is annoying, but OK, spam software that effectively KILLS all mail services: NOT OK!!!!

                                                                                                                      jjohnston" 


I don’t know why but lately every time they (GFI) come up with a new release of one of their products (I'm using quite a few) something stops working, needs to be re-configured or breaks;  Sorry to for the RANT, could not hold myself.

< Message edited by jmarin -- 12.Apr.2006 3:10:13 PM >

(in reply to jjohnston)
Post #: 12
RE: ME12 stopping mail flow through Exchange - 12.Apr.2006 3:51:42 PM   
NaomarS

 

Posts: 13
Joined: 26.Jan.2005
From: Atlanta
Status: offline
^^^^^
I am having this same problem.  The queues get like 2000, 3000, 4000+ emails and then i would have to shut off the smtp services, reboot, Move all the emails out of the queue into a temporary spot and then start the smtp service back up then move about 500 emails at a time into the "Mail, Pickup" folder until the queue is back down."   Then it happens again.  Mail starts backing up to 2000 + emails in the queue again.

I have just recently done what JJOHNSTON did just now and turned off SPF filtering and the queue went right down.  I think there is a bug with the spf filtering or something.  It isn't processing those emails fast enough.

I also have version 12 of Mail Essentials.

< Message edited by NaomarS -- 12.Apr.2006 3:53:18 PM >

(in reply to jjohnston)
Post #: 13
RE: ME12 stopping mail flow through Exchange - 13.Apr.2006 5:46:55 AM   
Mark Busuttil

 

Posts: 4836
Joined: 16.Oct.2005
Status: offline
GFI MailEssentials can process emails slowly when DNS problems occur in the network, can you please review the following kbase article for further information:

http://kbase.gfi.com/showarticle.asp?id=KBID001770

Thank you

< Message edited by Mark Busuttil -- 17.Apr.2006 3:22:49 AM >


_____________________________

Regards,
Mark Busuttil

GFI Software Ltd - www.gfi.com
Messaging, Content Security & Network Security Software
GFI: MailEssentials - MailSecurity - MailArchiver - FAXmaker - LANguard – WebMonitor

(in reply to NaomarS)
Post #: 14
RE: ME12 stopping mail flow through Exchange - 13.Apr.2006 6:55:11 AM   
NaomarS

 

Posts: 13
Joined: 26.Jan.2005
From: Atlanta
Status: offline
Mark, I think kbase article you posted pertains to Mail Archiver and not Mail essentials.  Is there another link you meant to post?

Thanks.

(in reply to Mark Busuttil)
Post #: 15
Page:   [1] 2   next >   >>
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> ME12 stopping mail flow through Exchange Page: [1] 2   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts