?
Solved

The connection was dropped due to an SMTP protocol event sink + others (AVG)

Posted on 2009-05-12
6
Medium Priority
?
567 Views
Last Modified: 2013-11-22
Ok, ive got problems on 2x SBS 2003 machines/ setups with this occuring on both in ESM / Queues, we either get the above error, or other events like messages stuck in the queues and not going anywhere.

i can 'iisreset' and things start flowing again and ive put it down to AVG being the culprit (8.5 SBS INT Sec) with its new exchange sided spam solution.

AVG have no idea what the issue is and im really at a loss (other than removing AVG from the server),  ive uninstalled the AVG Spam software, but have still got an AVG event sink, which i cant remove or disable (can someone give me the correct string)

                                Event: SMTP Protocol OnInboundCommand
                                      ID: {1553E0E4-D7C1-41C6-AC10-37E7B3E581AB}
                                    Name: SMTP AVG 8 AS Filter
                               SinkClass: SMTP.SampleFilter
                                 Enabled: True
                        SourceProperties: {
                                           rule = _EOD
                                           priority = 12000
                                          }

C:\>cscript smtpreg.vbs /disable 1 onarrival "SMTP AVG 8 AS Filter"

Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.

Binding Display Name Specified: SMTP AVG 8 AS Filter
Failed to find binding with display name:SMTP AVG 8 AS Filter


DNS looks fine, PTRs and alike all good, i can telent to the mail server etc, and i dont have GFI ;) , anyone ?


0
Comment
Question by:VoneServs
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 65

Expert Comment

by:Mestha
ID: 24363648
Have you tried the repair remove method with AVG/
Download the latest build from their web site, then run the installation. When it prompts, choose to repair the install. Let it complete and then reboot.
Once it has rebooted, you should then be able to remove the product gracefully.

Simon.
0
 

Author Comment

by:VoneServs
ID: 24363706
i am on hte latest build of AVG, and would prefer to have it on the server more than remove it completely as i like the centralised stuff for management, i wanted to try to disable the event sink to start with to see if that would help the queues sort themselves out.
0
 
LVL 65

Expert Comment

by:Mestha
ID: 24363807
It isn't possible to remove the event sink individually. The product needs to be removed to remove the sink.
The error you are seeing does not always mean there is a local problem. If can be caused by other things, like the port being blocked or the remote site rejecting the email. It depends on how you route your email.

Simon.
0
Looking for the Wi-Fi vendor that's right for you?

We know how difficult it can be to evaluate Wi-Fi vendors, so we created this helpful Wi-Fi Buyer's Guide to help you find the Wi-Fi vendor that's right for your business! Download the guide and get started on our checklist today!

 

Author Comment

by:VoneServs
ID: 24363948
so i cant disable the sink even?!  seems a bit a bizarre, i dont want AVG scanning anything, just having it sit there as a resident shield would be perfect.
0
 
LVL 65

Accepted Solution

by:
Mestha earned 1000 total points
ID: 24364235
The Exchange product is separate as far as I am aware, so you should be able to remove that. I have AVG on all of my Exchange servers, but I don't have the Exchange agent in use as I prefer to use something else.

If you disable the sink manually you will cause system instability, because the AVG product will be expecting it to be there.

Simon.
0
 

Author Closing Comment

by:VoneServs
ID: 31580485
this isnt really answered im sure theres a way to disable individual syncs
0

Featured Post

When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot has fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article we have discussed the manual scenarios to recover data from Windows 10 through some backup and recovery tools which are offered by it.
Storage devices are generally used to save the data or sometime transfer the data from one computer system to another system. However, sometimes user accidentally erased their important data from the Storage devices. Users have to know how data reco…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question