troubleshooting Question
Issue with GFI Mail Essentials and GFI Mail Security no processing emails correctly
melissaromagnoli
asked on
asked on
Hello,
At 1:52AM 07/04/2013 both GFI Mail Essentials and GFI Mail Security stopped blocking emails. In the log files it does reflect the email was blocked or sent to the users spam folder. However the user is still actually receiving these emails in their email inbox. I confirmed this is happening for all of our users. I did find errors in the debug log, however GFI support is closed today. Any assistance would be appreciated.
We currently run the following versions
GFI Mail Essentials Version 2010 Build 20120215
GFI Mail Security Version 2011 Build 20101129
Microsoft Exchange 2003 running on a Windows 2003 R2 SP2 server
gfiscans.gfi_log.txt
InSink.gfi_log.txt
At 1:52AM 07/04/2013 both GFI Mail Essentials and GFI Mail Security stopped blocking emails. In the log files it does reflect the email was blocked or sent to the users spam folder. However the user is still actually receiving these emails in their email inbox. I confirmed this is happening for all of our users. I did find errors in the debug log, however GFI support is closed today. Any assistance would be appreciated.
We currently run the following versions
GFI Mail Essentials Version 2010 Build 20120215
GFI Mail Security Version 2011 Build 20101129
Microsoft Exchange 2003 running on a Windows 2003 R2 SP2 server
gfiscans.gfi_log.txt
2013-07-04,11:00:36,559,3,"#00000fd4","#000010e8","info ","GFIScanS","Processing time [78]"
2013-07-04,11:00:36,559,3,"#00000fd4","#000010e8","info ","GFIScanS","CScanEngine::Scan [0x0] <<"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::Scan >>"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal >>"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - message_id [ <xxxxx@webmail-m250.sysops.aol.com>][0x0]"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - [id:1][ctx:184683584][count:4]"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - ALK [d46a2d11]"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::RefreshExceptionHandlingStatus >>"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","Skipping update [value: 0, tcnt: 740156] ..."
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - Server IP [64.12.xxx.xxx]"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - Server HELO [omr-m07.mx.aol.com]"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - Failed to read property GFI_MTAMSGPROPS_SMTPCommand"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - UniqueEmailID [{B2526DE9-B2F0-4C67-A80F-C3B8C3601EF3}]"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - Sender email [dominictomasco@aol.com]"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - Recipient email [dtomasco@americancollectors.com]"
2013-07-04,11:00:36,825,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - processing message with MTA ..."
2013-07-04,11:00:40,533,1,"#00000fd4","#00001d54","error ","GFIScanS","CScanEngine::ScanInternal - processing message with MTA ... FAILED [0xC00E0027]"
2013-07-04,11:00:40,533,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - MTA returned Flags [0x0]"
2013-07-04,11:00:40,533,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal - Translated Flags [0x0]"
2013-07-04,11:00:40,533,3,"#00000fd4","#00001d54","info ","GFIScanS","CScanEngine::ScanInternal [0x8000FFFF] <<"
2013-07-04,11:00:40,533,3,"#00000fd4","#00001d54","info ","GFIScanS","Processing time [3485]"
InSink.gfi_log.txt
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","[72] message uid: {B2526DE9-B2F0-4C67-A80F-C3B8C3601EF3}"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","[72] whitelist: (null)"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","[72] Pickup File Name not present"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","[72] IMMPID_MP_MSGCLASS not present"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","[72] New Message: <xxxxxxxx@webmail-m250.sysops.aol.com>"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","[72] Filename: <No Filename>"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","[72] SMTP Sender"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","rec[0]: xxxxxxxxx@xxxxxxxxxx.com"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","setting recipients: [SMTP:xxxxxxxxx@xxxxxxxxx.com];"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","sender: xxxxxxxxxx@aol.com"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","time: 2013-7-4 11:00:36:642"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","Allocationg global memory: 1962 bytes"
2013-07-04,11:00:36,825,1,"#00000620","#00001198","info ","InSink","-->ProcessMessage(72)"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","CItemSourceContext::processItem(230643E8,22BE45E0,22C2EDF4)"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","CItemSourceContext::processItem,getScanEngine...ok"
2013-07-04,11:00:36,825,3,"#00000620","#00001198","info ","InSink","CItemSourceContext::processItem,Scanning..."
2013-07-04,11:00:40,533,3,"#00000620","#00001198","info ","InSink","Scanning returned 0x8000ffff"
2013-07-04,11:00:40,533,1,"#00000620","#00001198","error ","InSink","Scanning...FAILED [0x8000FFFF]"
2013-07-04,11:00:40,533,1,"#00000620","#00001198","info ","InSink"," ProcessMessage(72)<--"
2013-07-04,11:00:40,533,1,"#00000620","#00001198","error ","InSink","[72] Failed to process message: 0x8000FFFF"
Learn from the best
Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.
Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 1 Comment.
Try for 7 days”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.
Our community of experts have been thoroughly vetted for their expertise and industry experience.