[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now


Close_wait connections stops the service for Mail Security

Posted on 2006-06-22
Medium Priority
Last Modified: 2012-06-22
Dear expert

We are having problems with Symantec Mail Security for SMTP 4.0 running on Windows server 2003. We have a mail server and also a Relay with our ISP, since last week we have experience a lot of delays in outgoing and incomming mails after relay server from our ISP was down for half day. Searching the log files in the Mail Security we can see there are many close_wait connections. The mail security 4.0 can handle only 100 connections at the same time so we are reaching that number in just a few minutes, that's causing a big queue in exchange that can´t be release and sometimes it chages state to RETRY.

For now, the only solution we have found is to stop mail security service, that will shut all the connections and start it again but we can't still release the queue. In the symantec logs file we see, in general, there are a lot of Could Not Contact Server and Timeout Exceeded errors, in our ISP they see a lot of "waiting for action from our mail server"

My question is if there is a possibilty we have a missconfiguration either in Mail Security or Exchange 2003 that never cause this problem before because we hadn't had such a big queue, or is still our ISP doing something that shouldn't. Or is just a coincidence of two problems at the same time (relay down and something else).

The problem is our queue is over 1000 mails and more than 1GB, is not a matter of bandwith, we have a frame relay E1 service, Exchange and mail security run in two different servers heavy enough.

I'll appreciate any answer you can tell me

Question by:ojgarciah
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
LVL 104

Accepted Solution

Sembee earned 2000 total points
ID: 16959736
If you suspect that there is a problem with an application such as the antivirus, then disabling or stopping it is not enough. You need to actually remove it. In this case I would have no hesitation in removing the Symantec product. Once it has been removed, restart the SMTP service and all the emails should flow out.


Author Comment

ID: 16959868
Hi Simon,

That could be a answer to this problem, but the mail queue is on the Symantec Mail Security applications, The exchange 2003 has forward almost all the queue to the mail security. What I need to do y to release the mail security queue. Besides, I can't find any reasonable reason to figure out why the application is not working as before. Also, we have around 700 people in my company and I can't just put away the antivirus.

Thanks for you comments

LVL 104

Expert Comment

ID: 16960003
In my experience Symantec's products cause more grief than they resolve. I don't deploy Symantec's products for this very reason and will tend to steer users away from their products.

You need to bypass the Symantec product if it is causing the problem. You may find that removing it and reinstalling it will fix the problem.
While I appreciate your concern about not having AV protection for your users, if the product isn't working correctly then you don't have anything - protection or email.

As for clearing the queues - I cannot help with that. You may have to speak to Symantec support for assistance with that. If you are lucky the messages are stored in a format where they can be easily moved in to the Exchange queueing system for re-processing.


Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New style of hardware planning for Microsoft Exchange server.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question