Print Page | Close Window

spamfilter has stalled twice in last 2 days

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096
Printed Date: 22 December 2024 at 3:38pm


Topic: spamfilter has stalled twice in last 2 days
Posted By: Terry
Subject: spamfilter has stalled twice in last 2 days
Date Posted: 29 August 2014 at 11:59am
I am on v4.6.0.113.  Twice during the last 2 days spamfilter has stalled and stops processing transactions.  I can't see anything meaningful in the logs just a break in the processing until we either restart the service of reboot the machine...nothing shows in the event logs either...
here is an excerpt from the logs:
 
08/29/14 07:01:11:423 -- (256260240) Detected TCP Connection: 181.31.207.65
08/29/14 07:01:11:423 -- (105656384) Resolving 50.194.112.129 - 50-194-112-129-static.hfc.comcastbusiness.net
08/29/14 07:01:11:423 -- (256260240) Connection from: 181.31.207.65  -  Originating country : Argentina
08/29/14 07:01:11:423 -- (256260240) GreyList limbo - Added 181.31.207.65
08/29/14 07:01:11:423 -- (256260240) IP is in not in GreyList Allowed. Disconnecting: 181.31.207.65
08/29/14 07:01:11:423 -- (256260240) No Data Received
08/29/14 07:01:11:423 -- (256260240) Disconnect
08/29/14 08:07:31:018 -- SpamFilter ISP v4.6.0.113 Listening on all IPs port 25 - SSL port 465 (64bit service mode)
08/29/14 08:07:31:720 -- (93876864) Found new domain in tbl_LocalDomains: SFI. Creating new FilterObject
08/29/14 08:07:31:861 -- (93876864) Detected differences in file timestamps - forcing DB export
08/29/14 08:07:31:923 -- (93876864) Reloading filter.ini: domains\SFI\Filters.ini
08/29/14 08:07:31:923 -- (93876864) Reloading file for tbl_LocalDomains: domains\SFI\AllowedDomains.txt (93 bytes)
08/29/14 08:07:32:032 -- (93876864) Reloading file for tblWL_EmailsFrom: domains\SFI\excludefrom.txt (1090 bytes)
 


Replies:
Posted By: LogSat
Date Posted: 29 August 2014 at 4:54pm
Terry,

We'd need to see the entire SpamFilter activity logfile to get a better idea of what is happening. Can you please zip us the following so we can take a look:

• SpamFilter's activity logfile for today

• The \SpamFilter\Domains directory structure (if the files containing any of your blacklists/whitelists are outside that directory tree, please include those as well.


If the zipped file is over 8MB in size, I'll send you via PM the URL where you can upload the file.




-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: LogSat
Date Posted: 29 August 2014 at 11:19pm
Terry,

We received the files, thank you. While we're still going thru the logs, I noticed that SpamFilter was shut down gracefully at exactly 6:00AM, and restarted a few seconds after that. Then just like you said, an hour and a minute afterwards at 7:01 all activity simply stops.
Could you please confirm that the shutdown at 6AM was either performed by a scheduled task or performed manually by an admin, so we can eliminate it from being related to the issue an hour later?

Also, could you please also upload us the logfile for the previous time this happened, in the hope we see some correlating events?

Thanks,

Roberto


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Terry
Date Posted: 30 August 2014 at 9:36am
the shutdown is scheduled every day at 6am so this was expected.  Still trying to figure out how to upload the second log...the upload to the cloud doesn't seem to take yet...

Posted By: Terry
Date Posted: 30 August 2014 at 9:43am
still unable to upload the second log...do you need to send me another upload link?

Posted By: LogSat
Date Posted: 30 August 2014 at 7:24pm
Yes, I saw several incomplete uploads. As an upgrade of the OwnCloud website was due anyways, we proceeded with the upgrade just now. Could you please try again to see if that works? 

If not, unless you have a URL where I can download them from your website, I can setup an FTP site for you to upload.

I'm sorry for the trouble,

Roberto


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Terry
Date Posted: 31 August 2014 at 10:19am
I have uploaded the logfile...you should see it stopped at 3pm and we did not catch the fact that it was not running till the next morning...

Posted By: LogSat
Date Posted: 31 August 2014 at 8:35pm
Terry,

We're still looking to see if there are commonalities between the two logs at the time spamFilter stopped processing traffic.

In the meantime, we see that on both days at 6AM SpamFilter was stopped than then restarted a few seconds later:

08/27/14 06:00:03:102 -- Shutting down all threads. Please wait up to 15-20 seconds....
08/27/14 06:00:12:774 -- SpamFilter ISP v4.6.0.113 Listening on all IPs port 25 - SSL port 465 (64bit service mode)
...............
08/27/14 15:00:20:926   SpamFilter stopped with no reason


08/29/14 06:00:02:968 -- Shutting down all threads. Please wait up to 15-20 seconds....
08/29/14 06:00:09:894 -- SpamFilter ISP v4.6.0.113 Listening on all IPs port 25 - SSL port 465 (64bit service mode)
...............
08/29/14 07:01:11:423   SpamFilter stopped with no reason


Is there an automated process that caused this to happen? If so, does it only occur at 6AM?
When SpamFilter stopped processing traffic (times in bold above), when you logged onto the server did you still see SpamFilter's GUI on screen (or the SpamFilterSvc.exe process running), or did SpamFilter completely crash/shutdown?


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Terry
Date Posted: 01 September 2014 at 9:48am
Yes we have an automated process that shuts down the spamfilter service at 6am and restarts it a few minutes later....and when it was stalled the service was still running however we could not get to the gui.  We could however at least once restart the service and get it running (I did not find it the second time I believe the person restarted the server )


Print Page | Close Window