Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 574
  • Last Modified:

The connection was dropped due to an SMTP protocol event sink + others (AVG)

Ok, ive got problems on 2x SBS 2003 machines/ setups with this occuring on both in ESM / Queues, we either get the above error, or other events like messages stuck in the queues and not going anywhere.

i can 'iisreset' and things start flowing again and ive put it down to AVG being the culprit (8.5 SBS INT Sec) with its new exchange sided spam solution.

AVG have no idea what the issue is and im really at a loss (other than removing AVG from the server),  ive uninstalled the AVG Spam software, but have still got an AVG event sink, which i cant remove or disable (can someone give me the correct string)

                                Event: SMTP Protocol OnInboundCommand
                                      ID: {1553E0E4-D7C1-41C6-AC10-37E7B3E581AB}
                                    Name: SMTP AVG 8 AS Filter
                               SinkClass: SMTP.SampleFilter
                                 Enabled: True
                        SourceProperties: {
                                           rule = _EOD
                                           priority = 12000
                                          }

C:\>cscript smtpreg.vbs /disable 1 onarrival "SMTP AVG 8 AS Filter"

Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.

Binding Display Name Specified: SMTP AVG 8 AS Filter
Failed to find binding with display name:SMTP AVG 8 AS Filter


DNS looks fine, PTRs and alike all good, i can telent to the mail server etc, and i dont have GFI ;) , anyone ?


0
VoneServs
Asked:
VoneServs
  • 3
  • 3
1 Solution
 
MesthaCommented:
Have you tried the repair remove method with AVG/
Download the latest build from their web site, then run the installation. When it prompts, choose to repair the install. Let it complete and then reboot.
Once it has rebooted, you should then be able to remove the product gracefully.

Simon.
0
 
VoneServsAuthor Commented:
i am on hte latest build of AVG, and would prefer to have it on the server more than remove it completely as i like the centralised stuff for management, i wanted to try to disable the event sink to start with to see if that would help the queues sort themselves out.
0
 
MesthaCommented:
It isn't possible to remove the event sink individually. The product needs to be removed to remove the sink.
The error you are seeing does not always mean there is a local problem. If can be caused by other things, like the port being blocked or the remote site rejecting the email. It depends on how you route your email.

Simon.
0
2017 Webroot Threat Report

MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.

 
VoneServsAuthor Commented:
so i cant disable the sink even?!  seems a bit a bizarre, i dont want AVG scanning anything, just having it sit there as a resident shield would be perfect.
0
 
MesthaCommented:
The Exchange product is separate as far as I am aware, so you should be able to remove that. I have AVG on all of my Exchange servers, but I don't have the Exchange agent in use as I prefer to use something else.

If you disable the sink manually you will cause system instability, because the AVG product will be expecting it to be there.

Simon.
0
 
VoneServsAuthor Commented:
this isnt really answered im sure theres a way to disable individual syncs
0

Featured Post

Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now