Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Getting an abend in spam filter
  FAQ FAQ  Forum Search   Register Register  Login Login

Getting an abend in spam filter

 Post Reply Post Reply
Author
Terry View Drop Down
Senior Member
Senior Member


Joined: 06 February 2005
Status: Offline
Points: 155
Post Options Post Options   Thanks (0) Thanks(0)   Quote Terry Quote  Post ReplyReply Direct Link To This Post Topic: Getting an abend in spam filter
    Posted: 27 September 2007 at 3:38pm
We are getting this error:
 
Exception occurred during GetCurrDNSServer: Access violation at address 00413ADA in module 'SpamFilterSvc.exe'. Read of address 00000005
 
occasionally but when it happens like yesterday it pretty much shut us down...it started cascading it appeared until eventually we max'd our connections.....the problem seemed to first show up around 15:15 in the log and then really went south in a hurry as you will see....
 
I can upload the log to your ftp site to see if it gives you a clue as to what happenned....(I still have the user and password information for that).
 
I am on release 3.5.4.713
 
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 28 September 2007 at 4:35am
Terry,

Could you please do upload the log for the entire day, and also include a copy of your SpamFilter.ini file?

Thanks.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Terry View Drop Down
Senior Member
Senior Member


Joined: 06 February 2005
Status: Offline
Points: 155
Post Options Post Options   Thanks (0) Thanks(0)   Quote Terry Quote  Post ReplyReply Direct Link To This Post Posted: 28 September 2007 at 10:25am
Roberto, we did upload the entire day when we did the post...I will upload the spamfilter.ini file this morning....did you not find the log file?
Back to Top
Terry View Drop Down
Senior Member
Senior Member


Joined: 06 February 2005
Status: Offline
Points: 155
Post Options Post Options   Thanks (0) Thanks(0)   Quote Terry Quote  Post ReplyReply Direct Link To This Post Posted: 28 September 2007 at 11:33am
Roberto, we also had another abend last night that stopped all mail delivery until I forced the app to close this morning and restarted it...I am not at work but I have asked one of the guys to upload that log too...it is 20070928.zip when it gets there...around 2am it abended and you can see I restarted at 6:52
 
09/28/07 02:03:44:774 -- (3280) Connection from: 125.177.221.41  -  Originating country : Korea, Republic of
09/28/07 02:03:45:711 -- (488) Scanning PDF for spam:T-Mobile HotSpot Receipt.pdf
09/28/07 02:03:45:821 -- (488) Warning: error (1) scanning PDF for spam - Access violation at address 00405C17 in module 'SpamFilterSvc.exe'. Read of address 00000228
09/28/07 02:03:45:821 -- (488) Warning: error scanning image for spam - Access violation at address 004047A4 in module 'SpamFilterSvc.exe'. Read of address 000002CE
09/28/07 06:52:35:133 -- SpamFilter ISP v3.5.4.713 Listening on all IPs port 25
09/28/07 06:52:35:149 -- (9808) Found new domain in tbl_LocalDomains: SFI. Creating new FilterObject
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 30 September 2007 at 5:07pm
Terry,

I'm sorry for the delay in replying to the forum. We are usually able to providing support by email much faster, so please do feel free to contact us at support at logsat dot come for immediate replies.

We do not see any logs in the ftp area, I'll send you a PM with the ftp details to ensure you have the correct ones.

For the error above (on 09/28/07), it seems to be caused by the PDF library used to analyze PDF files. I would recommend to disable the functionality that allows SpamFilter to scan for images within PDF files, as this should eliminate such problems. To do so, please edit the SpamFilter.ini file, and change the following setting to the value of 0 (zero). Please note that you do not need to restart SpamFilter for the setting to become active.

;Specify the max number of pages a PDF document must contain in order to be scanned for spam signatures. The scan will be skipped altogether if there are more than this number of pages
SpamPDFMaxPagesToScan=0




Edited by LogSat - 30 September 2007 at 5:09pm
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Terry View Drop Down
Senior Member
Senior Member


Joined: 06 February 2005
Status: Offline
Points: 155
Post Options Post Options   Thanks (0) Thanks(0)   Quote Terry Quote  Post ReplyReply Direct Link To This Post Posted: 30 September 2007 at 6:45pm
Sorry...I see what I did wrong on the file upload...I will send it now....
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 02 October 2007 at 12:23pm
Terry,

We debugged the logfile you uploaded to the ftp site, and it does show that the  error (Warning: error (1) scanning PDF for spam) you reported on the 28th is what caused SpamFilter to crash. I do recommend you disable the PDF filter as in our previous post to prevent similar problems in the future.

Please note however that this logfile was for the 28th, while in this forum posting you also originally reported an issue on the 27th (Exception occurred during GetCurrDNSServer). If you'd like us to see what happened that day as well, we'll be glad to look at those logs to.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Terry View Drop Down
Senior Member
Senior Member


Joined: 06 February 2005
Status: Offline
Points: 155
Post Options Post Options   Thanks (0) Thanks(0)   Quote Terry Quote  Post ReplyReply Direct Link To This Post Posted: 02 October 2007 at 2:35pm
I have uploaded 2 more logs...1 from the 26th and 1 from the 27th...both of these logs show access violations occuring in what appears to be different functions of the exe....if you could look at these I would appreciate it.
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.176 seconds.