GFi not scanning "This is spam email" (Full Version)

All Forums >> [Content Security] >> GFI MailEssentials for Exchange/SMTP



Message

nhbill -> GFi not scanning "This is spam email" (5.May2008 6:18:29 PM)

It has been working great now it won't scan at all. I've ran the test and it pass without a problem I've have initiated a manual scan but there is still email that have not been processed. What am I doing wrong?

thanks,
nhb



John Letourneau -> RE: GFi not scanning "This is spam email" (5.May2008 7:04:01 PM)

nhbill,

What type of messages are currently in your "This Is Spam" email folder?  How are you connecting to this folder?  If you go to GFI MailEssentials Configuration > Anti-Spam > Properties > Public Folder Scanning you can see how you are connecting.



nhbill -> RE: GFi not scanning "This is spam email" (5.May2008 7:18:51 PM)

quote:

ORIGINAL: John Letourneau

nhbill,

What type of messages are currently in your "This Is Spam" email folder?  How are you connecting to this folder?  If you go to GFI MailEssentials Configuration > Anti-Spam > Properties > Public Folder Scanning you can see how you are connecting.



I am connecting via IMAPI to exchange 2003.

Example of spam in the folder

-----Original Message-----
From: Helga Isaac [mailto:pta@foxnews.com]
Sent: Friday, April 04, 2008 12:20 PM
To: Ralph Kravitz
Subject: need to get out of debt

Reduce \/\/hatt You Owe by 50%. Get out of debt today!
Rêduce Ínterest & Monthly Päyments Easy, we willl shôw you how..
Free Quote in 10 Min.
http://www.freefromdebtjg.cn



Subject: get out of debt quick

Reduce What You Owe by 50%. Get out of debt todáay!
Reduce 1nterest & Monthly Payments Easy, we willl shoow you how..
Free Quoté in 10 Min.
http://www.freefromdebtjf.cn



John Letourneau -> RE: GFi not scanning "This is spam email" (5.May2008 7:35:52 PM)

nhbill,

If you go to ..\Program Files\GFI\MailEssentials\DebugLogs and open PFolders.gfi_log.txt after hitting scan now scroll all the way to the bottom and see if you see anything that resembles this:

2008-05-05,19:31:59,500,3,"#00000580","#00000604","info   ","PFolders","ProcessInternal: calling ProcessFolder[http://meserver/public/GFI AntiSpam Folders/This is spam email]"
2008-05-05,19:31:59,500,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: >>"
2008-05-05,19:31:59,515,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: query[select * from "http://meserver/public/GFI AntiSpam Folders/This is spam email" where ("http://schemas.microsoft.com/mapi/proptag/x001A001E" = 'IPM.Note' OR "http://schemas.microsoft.com/mapi/proptag/x001A001E"='IPM.Post') AND "DAV:isfolder"=false]"
2008-05-05,19:31:59,515,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: opening url..."
2008-05-05,19:31:59,531,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: executing query..."
2008-05-05,19:31:59,765,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: starting enumeration..."
2008-05-05,19:31:59,859,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: there are items to enumerate..."
2008-05-05,19:32:02,484,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: finished enumeration"
2008-05-05,19:32:02,484,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: <<"

What we are looking for is the line that states "there are items to enumerate".  If you do not see this please drop a test message into the folder and hit scan now again.  Does the newly added message get processed?



nhbill -> RE: GFi not scanning "This is spam email" (6.May2008 10:50:14 AM)

quote:

ORIGINAL: John Letourneau

nhbill,

If you go to ..\Program Files\GFI\MailEssentials\DebugLogs and open PFolders.gfi_log.txt after hitting scan now scroll all the way to the bottom and see if you see anything that resembles this:




I don't see a PFolders.gfi_log.txt but I do see RPFolders.gfi_log.txt << I'm assuming this is the file.



nhbill -> RE: GFi not scanning "This is spam email" (6.May2008 10:59:54 AM)

Nothing.....


quote:

ORIGINAL: John Letourneau

nhbill,

If you go to ..\Program Files\GFI\MailEssentials\DebugLogs and open PFolders.gfi_log.txt after hitting scan now scroll all the way to the bottom and see if you see anything that resembles this:

2008-05-05,19:31:59,500,3,"#00000580","#00000604","info   ","PFolders","ProcessInternal: calling ProcessFolder[http://meserver/public/GFI AntiSpam Folders/This is spam email]"
2008-05-05,19:31:59,500,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: >>"
2008-05-05,19:31:59,515,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: query[select * from "http://meserver/public/GFI AntiSpam Folders/This is spam email" where ("http://schemas.microsoft.com/mapi/proptag/x001A001E" = 'IPM.Note' OR "http://schemas.microsoft.com/mapi/proptag/x001A001E"='IPM.Post') AND "DAV:isfolder"=false]"
2008-05-05,19:31:59,515,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: opening url..."
2008-05-05,19:31:59,531,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: executing query..."
2008-05-05,19:31:59,765,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: starting enumeration..."
2008-05-05,19:31:59,859,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: there are items to enumerate..."
2008-05-05,19:32:02,484,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: finished enumeration"
2008-05-05,19:32:02,484,3,"#00000580","#00000604","info   ","PFolders","ProcessFolder: <<"

What we are looking for is the line that states "there are items to enumerate".  If you do not see this please drop a test message into the folder and hit scan now again.  Does the newly added message get processed?



nhbill -> RE: GFi not scanning "This is spam email" (6.May2008 7:28:43 PM)

last message in the log file....

2008-05-05,14:04:47,843,3,"#000005b8","#00000f80","info   ","RPFolders","Init: appdir[C:\Program Files\GFI\MailEssentials\]"
2008-05-05,14:04:47,843,3,"#000005b8","#00000f80","info   ","RPFolders","Init: plugregkey[SOFTWARE\GFI\ME12\Attendant\rpfolders:8]"
2008-05-05,14:04:47,843,3,"#000005b8","#00000f80","info   ","RPFolders","Init: regroot[SOFTWARE\GFI\ME12]"
2008-05-05,14:04:47,843,3,"#000005b8","#00000f80","info   ","RPFolders","Init: connection string[C:\Program Files\GFI\MailEssentials\config.mdb]"
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: >>"
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: retrieving timeout value..."
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: retrieving enabled value..."
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: settings - interval[7200000], enabled[1], spamtokfile[C:\Program Files\GFI\MailEssentials\Data\spam_tmp.tok], hamtokfile[C:\Program Files\GFI\MailEssentials\Data\ham_tmp.tok]"
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: loading local domains..."
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: local domains loaded[5]"
2008-05-05,14:04:47,859,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: <<"
2008-05-05,14:04:47,875,3,"#000005b8","#00000f80","info   ","RPFolders","Init: initial wait interval[600000]"
2008-05-05,14:04:47,875,3,"#000005b8","#00000f80","info   ","RPFolders","Init: namespace index[-1]"
2008-05-05,14:04:48,140,3,"#000005b8","#00000f80","info   ","RPFolders","Process: >>"
2008-05-05,14:04:48,140,3,"#000005b8","#00000f80","info   ","RPFolders","Process: entering initial wait state..."
2008-05-05,14:14:25,650,3,"#000005b8","#00000f80","info   ","RPFolders","RefreshContext: >>"



Eddie.Hirko -> RE: GFi not scanning "This is spam email" (7.May2008 10:06:24 AM)

nhbill,

Unfortunately there's not enough information in that snippet to get to the bottom of your issue.  Please open a support ticket at http://crm.gfi.com/Customizations/SupportIssue/support.aspx?lcode=en and submit a full Troubleshooter output so we can help you resolve your issue.  Thank you very much!



nhbill -> RE: GFi not scanning "This is spam email" (7.May2008 11:55:22 AM)

Uploaded the troubleshoot - LocalCom Support.zip




quote:

ORIGINAL: Eddie.Hirko

nhbill,

Unfortunately there's not enough information in that snippet to get to the bottom of your issue.  Please open a support ticket at http://crm.gfi.com/Customizations/SupportIssue/support.aspx?lcode=en and submit a full Troubleshooter output so we can help you resolve your issue.  Thank you very much!



nhbill -> RE: GFi not scanning "This is spam email" (7.May2008 4:04:53 PM)

Problem solved....

Apparently when user forward email by selecting all the spam and forwarding it cause the folder This is spam email to hang thus preventing GFI from scanning it correctly. I could not delete the mail manually from This is spam email I had to delete the public folder and recreated it again and reboot the gfi server and now everything works fine.

After messing around with it more.....
It seems like any email that you can't delete form the This is spam email folder will cause GFI to not function correctly.

hope that makes sense



John Letourneau -> RE: GFi not scanning "This is spam email" (7.May2008 7:52:21 PM)

nhbill,

Thanks for letting us know what fixed this.



nhbill -> RE: GFi not scanning "This is spam email" (8.May2008 5:49:41 PM)

Got another problem. Manual scan works great but some reason the auto scan does not work.



nhbill -> RE: GFi not scanning "This is spam email" (9.May2008 10:55:49 AM)

I've notice that msecatt.exe sit at 25% cpu usage and my weight.bsp files is only 25MB



Page: [1]