Print Page | Close Window

Getting an abend in spam filter

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6260
Printed Date: 23 February 2025 at 12:15am


Topic: Getting an abend in spam filter
Posted By: Terry
Subject: Getting an abend in spam filter
Date Posted: 27 September 2007 at 3:38pm
We are getting this error:
 
Exception occurred during GetCurrDNSServer: Access violation at address 00413ADA in module 'SpamFilterSvc.exe'. Read of address 00000005
 
occasionally but when it happens like yesterday it pretty much shut us down...it started cascading it appeared until eventually we max'd our connections.....the problem seemed to first show up around 15:15 in the log and then really went south in a hurry as you will see....
 
I can upload the log to your ftp site to see if it gives you a clue as to what happenned....(I still have the user and password information for that).
 
I am on release 3.5.4.713
 


Replies:
Posted By: LogSat
Date Posted: 28 September 2007 at 4:35am
Terry,

Could you please do upload the log for the entire day, and also include a copy of your SpamFilter.ini file?

Thanks.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Terry
Date Posted: 28 September 2007 at 10:25am
Roberto, we did upload the entire day when we did the post...I will upload the spamfilter.ini file this morning....did you not find the log file?

Posted By: Terry
Date Posted: 28 September 2007 at 11:33am
Roberto, we also had another abend last night that stopped all mail delivery until I forced the app to close this morning and restarted it...I am not at work but I have asked one of the guys to upload that log too...it is 20070928.zip when it gets there...around 2am it abended and you can see I restarted at 6:52
 
09/28/07 02:03:44:774 -- (3280) Connection from: 125.177.221.41  -  Originating country : Korea, Republic of
09/28/07 02:03:45:711 -- (488) Scanning PDF for spam:T-Mobile HotSpot Receipt.pdf
09/28/07 02:03:45:821 -- (488) Warning: error (1) scanning PDF for spam - Access violation at address 00405C17 in module 'SpamFilterSvc.exe'. Read of address 00000228
09/28/07 02:03:45:821 -- (488) Warning: error scanning image for spam - Access violation at address 004047A4 in module 'SpamFilterSvc.exe'. Read of address 000002CE
09/28/07 06:52:35:133 -- SpamFilter ISP v3.5.4.713 Listening on all IPs port 25
09/28/07 06:52:35:149 -- (9808) Found new domain in tbl_LocalDomains: SFI. Creating new FilterObject

Posted By: LogSat
Date Posted: 30 September 2007 at 5:07pm
Terry,

I'm sorry for the delay in replying to the forum. We are usually able to providing support by email much faster, so please do feel free to contact us at support at logsat dot come for immediate replies.

We do not see any logs in the ftp area, I'll send you a PM with the ftp details to ensure you have the correct ones.

For the error above (on 09/28/07), it seems to be caused by the PDF library used to analyze PDF files. I would recommend to disable the functionality that allows SpamFilter to scan for images within PDF files, as this should eliminate such problems. To do so, please edit the SpamFilter.ini file, and change the following setting to the value of 0 (zero). Please note that you do not need to restart SpamFilter for the setting to become active.

;Specify the max number of pages a PDF document must contain in order to be scanned for spam signatures. The scan will be skipped altogether if there are more than this number of pages
SpamPDFMaxPagesToScan=0




-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Terry
Date Posted: 30 September 2007 at 6:45pm
Sorry...I see what I did wrong on the file upload...I will send it now....

Posted By: LogSat
Date Posted: 02 October 2007 at 12:23pm
Terry,

We debugged the logfile you uploaded to the ftp site, and it does show that the  error (Warning: error (1) scanning PDF for spam) you reported on the 28th is what caused SpamFilter to crash. I do recommend you disable the PDF filter as in our previous post to prevent similar problems in the future.

Please note however that this logfile was for the 28th, while in this forum posting you also originally reported an issue on the 27th (Exception occurred during GetCurrDNSServer). If you'd like us to see what happened that day as well, we'll be glad to look at those logs to.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Terry
Date Posted: 02 October 2007 at 2:35pm
I have uploaded 2 more logs...1 from the 26th and 1 from the 27th...both of these logs show access violations occuring in what appears to be different functions of the exe....if you could look at these I would appreciate it.


Print Page | Close Window