Spam Filter ISP Support - Urgent Problem!! Stopped getting mails

Urgent Problem!! Stopped getting mails

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6486
Printed Date: 14 March 2025 at 7:23pm

Topic: Urgent Problem!! Stopped getting mails

Posted By: morten44
Subject: Urgent Problem!! Stopped getting mails
Date Posted: 17 May 2008 at 4:53pm

Hi.

We have been running the ISP Spamfilter for about the whole period of the trail. It is expirering the 21st of May and we are going to buy it.

But today we started to get a problem. Since about 12.00 today it has been very quirert and very fiew mails are getting delivered. When i look at the live log file it is as busy as every but the Delivered mail and blocked mail does not change.

In the log file there are several enteries like:

05-17-08 22:33:26:453 -- (9528) RCPT TO: mailto:info@volunteerchina.org - info@volunteerchina.org accepted
05-17-08 22:33:26:484 -- (11620) Adding to Quarantine file:Qrt5310.tmp.queued
05-17-08 22:33:26:500 -- (10812) Adding to Quarantine file:Qrt5313.tmp.queued
05-17-08 22:33:26:625 -- (11140) - MAPS search done...
05-17-08 22:33:26:625 -- (11140) RCPT TO: mailto:b_russell_ug@tvind.dk - b_russell_ug@tvind.dk accepted
05-17-08 22:33:26:625 -- (11496) Adding to Quarantine file:Qrt5316.tmp.queued
05-17-08 22:33:26:625 -- (1784) Received MAIL FROM: < mailto:camilla@ltindia.com - camilla@ltindia.com >
05-17-08 22:33:26:640 -- (11152) Adding to Quarantine file:Qrt5319.tmp.queued
05-17-08 22:33:26:656 -- (10752) Adding to Quarantine file:Qrt531B.tmp.queued
05-17-08 22:33:26:671 -- (10768) Adding to Quarantine file:Qrt531F.tmp.queued
05-17-08 22:33:26:687 -- (11652) Adding to Quarantine file:Qrt5321.tmp.queued
05-17-08 22:33:26:703 -- (11576) Adding to Quarantine file:Qrt5323.tmp.queued
05-17-08 22:33:26:718 -- (11616) Adding to Quarantine file:Qrt5325.tmp.queued
05-17-08 22:33:26:734 -- (11580) Adding to Quarantine file:Qrt5327.tmp.queued
05-17-08 22:33:26:750 -- (11548) Adding to Quarantine file:Qrt5329.tmp.queued
05-17-08 22:33:26:765 -- (11420) Adding to Quarantine file:Qrt532B.tmp.queued
05-17-08 22:33:26:781 -- (10684) Adding to Quarantine file:Qrt532F.tmp.queued
05-17-08 22:33:26:796 -- (12036) Adding to Quarantine file:Qrt5330.tmp.queued
05-17-08 22:33:26:812 -- (12204) Adding to Quarantine file:Qrt5331.tmp.queued
05-17-08 22:33:26:828 -- (4624) Adding to Quarantine file:Qrt5333.tmp.queued
05-17-08 22:33:26:843 -- (11196) Adding to Quarantine file:Qrt5335.tmp.queued
05-17-08 22:33:26:859 -- (11408) Adding to Quarantine file:Qrt5339.tmp.queued
05-17-08 22:33:26:875 -- (11488) Adding to Quarantine file:Qrt533E.tmp.queued
05-17-08 22:33:26:890 -- (11384) Adding to Quarantine file:Qrt5343.tmp.queued
05-17-08 22:33:26:906 -- (11736) Adding to Quarantine file:Qrt5345.tmp.queued

Can anyone give me a hint why i get this. Is this normal. Can those files contain mails that we have lost the whole day and can they be recovered!!!!!

Hope on a fast reply

Kind Regards
Morten

Replies:

Posted By: LogSat
Date Posted: 17 May 2008 at 4:58pm

Morten,

Those files are spam emails that cannot be stored in the quarantine database for some reason (usually due to the database server being unavailable). They are thus being queued on disk, and when the database server comes online again they will be automatically saved back in the database.

If you don't receive any emails and/or there's database issues, you should look into finding out what could be wrong. If you can zip and email us your SpamFilter's activity logfile for today we'll try to see what is going on. If the zip is over 5MB in size, I'll PM you the login info for our ftp server so you can upload it there.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: morten44
Date Posted: 17 May 2008 at 5:35pm

Thanks for your fast reply.

I have uploaded the log file for today. I belive that it was around 12.00 today that we started to get the problem (or first reported by users that they did not get mails)

I have uploaded log file for today to your FTP server. File name "Morten44_20080517"

Hope you can have a look.

We are using quarantene in mysql database. File is very big and i dont know if that can impact it

Looking forward to hear from you

Regards

Morten

Posted By: LogSat
Date Posted: 17 May 2008 at 11:52pm

Morten,

We received your logs. All log entries show normal activity, up until 10:08:36AM. At that point, all SpamFilter's activity suddenly stops, without any indications of any errors.

At 22:11:12 the logs show that SpamFilter is restarted, and email is then processed normally.

Can you please let us know if the server blue-screened, or if the SpamFilter process was terminated by killing it using the "End Now" option in Task manager? There is no indication in the logs of SpamFilter crashing nor being shut down cleanly, which is rather unusual, and most often indicates a problem with the server itself crashing.

As a side-note, there is an issue with your database server, as most of the attempts to store emails in the quarantine are being queued do to the database being too busy.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: morten44
Date Posted: 18 May 2008 at 1:31pm

It seems like the spamfilter ISP froze and did not respond. had to be closed.

Then server was restarted and then we started spamfilter again and now it seems to have started to work fine again. I still dont know what happened, but will follow up now over some days and see if it happens again.

Thanks for your help so far

Kind Regards

Morten