Print Page | Close Window

all incoming email is blocked

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5861
Printed Date: 19 October 2017 at 2:18pm


Topic: all incoming email is blocked
Posted By: apaul
Subject: all incoming email is blocked
Date Posted: 08 November 2006 at 4:02pm
Hi - I'm new to SpanFilter ISP. Our SpamFilter ISP has been functioning quite well. However, this morning, all incoming email to our users ceased. When I looked at the atvitiy log, this is what I found:

11/08/06 14:44:01:218 -- SpamFilter ISP v2.7.1.532 Listening on 192.168.0.23:25,
11/08/06 14:44:01:218 -- Exception occurred during UpdateSMTPSettings: Could not bind socket. Address and port are already in use.
11/08/06 14:44:01:218 -- Reloading local black / white lists: excludedmail.txt
11/08/06 14:44:01:218 -- Reloading local black / white lists: whitelistdomains.txt
11/08/06 14:44:01:218 -- Reloading local black / white lists: bannesattach.txt
11/08/06 14:44:01:218 -- Reloading local black / white lists: unfilter.txt
11/08/06 14:44:01:218 -- Reloading local black / white lists: C:\Documents and Settings\Administrator\My Documents\domains.txt
11/08/06 14:44:01:218 -- Reloading local black / white lists: C:\Program Files\SpamFilter\HoneypotBlockedIPs.txt
11/08/06 14:44:01:218 -- Reloading local black / white lists: C:\Program Files\SpamFilter\AutoWhiteListForceDelivery.txt
11/08/06 14:44:01:218 -- Reloading local black / white lists: C:\Program Files\SpamFilter\ccTLDs.txt
11/08/06 14:44:01:218 -- Reloading local black / white lists: C:\Program Files\SpamFilter\AllowedDomainFilterMatrix.txt
11/08/06 14:44:02:234 -- Starting to process queue directory...
11/08/06 14:44:02:250 -- (1920) BayesianThread starting
11/08/06 14:44:02:250 -- (2412) SpamFilterForm - Begin loading corpus.db
11/08/06 14:44:02:250 -- (2676) Blacklist cache - starting cleanup
11/08/06 14:44:02:250 -- (1920) TBayesianThread - Begin LoadFromFile for corpus.db (db.dat)
11/08/06 14:44:02:250 -- (2412) TSpamFilterForm - Begin LoadFromFile for corpus.db (db.dat)
11/08/06 14:44:02:250 -- (1920) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat -> Ind42.tmp
11/08/06 14:44:02:265 -- (2412) TSpamFilterForm - LoadFromFile for Corpus.db - copied db.dat -> Ind44.tmp
11/08/06 14:44:02:281 -- (1920) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat.prb -> Ind43.tmp
11/08/06 14:44:02:281 -- (1920) TBayesianThread - LoadFromFile for Corpus.db - setting Buffer size to 2313498
11/08/06 14:44:02:281 -- (1920) TBayesianThread - LoadFromFile for Corpus.db - Reading Buffer in mem
11/08/06 14:44:02:281 -- (1920) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - Ind42.tmp
11/08/06 14:44:02:296 -- (2412) TSpamFilterForm - LoadFromFile for Corpus.db - copied db.dat.prb -> Ind45.tmp
11/08/06 14:44:02:296 -- (2412) TSpamFilterForm - LoadFromFile for Corpus.db - setting Buffer size to 2313498
11/08/06 14:44:02:296 -- (2412) TSpamFilterForm - LoadFromFile for Corpus.db - Reading Buffer in mem
11/08/06 14:44:02:296 -- (1920) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - Ind43.tmp
11/08/06 14:44:02:296 -- (2412) TSpamFilterForm - LoadFromFile for Corpus.db - loaded files in memory - Ind44.tmp
11/08/06 14:44:02:312 -- (2412) TSpamFilterForm - LoadFromFile for Corpus.db - loaded files in memory - Ind45.tmp
11/08/06 14:44:02:781 -- (1920) TBayesianThread - End LoadFromFile for corpus.db (db.dat) (499)
11/08/06 14:44:02:781 -- (1920) Begin Sync Corpus.db
11/08/06 14:44:02:781 -- (1920) Sync Corpus.db pass 0a
11/08/06 14:44:02:781 -- (1920) Sync Corpus.db pass 0b
11/08/06 14:44:02:781 -- (1920) Sync Corpus.db pass 0c
11/08/06 14:44:02:781 -- (1920) Sync Corpus.db - 166997 - 0
11/08/06 14:44:02:781 -- (1920) Sync Corpus.db pass 1 (0)
11/08/06 14:44:02:812 -- (2412) TSpamFilterForm - End LoadFromFile for corpus.db (db.dat) (516)
11/08/06 14:44:02:812 -- (2412) SpamFilterForm - End loading corpus.db
11/08/06 14:44:03:078 -- (1920) Sync Corpus.db pass 2 (297)
11/08/06 14:44:03:078 -- (1920) Sync Corpus.db pass 3 (297)
11/08/06 14:44:03:078 -- (1920) Sync Corpus.db pass 4 (297)
11/08/06 14:44:03:093 -- (1920) Sync Corpus.db pass 5 (312)
11/08/06 14:44:03:140 -- (1920) Sync Corpus.db pass 6 (359)
11/08/06 14:44:03:140 -- (1920) Sync Corpus.db pass 7 (359)
11/08/06 14:44:03:140 -- (1920) Sync Corpus.db pass 8 (359)
11/08/06 14:44:03:140 -- (1920) End Sync Corpus.db (359)
11/08/06 14:44:03:250 -- Bayesian Thread is not running - starting...
11/08/06 14:44:03:250 -- (3888) BayesianThread starting
11/08/06 14:44:03:250 -- (3888) TBayesianThread - Begin LoadFromFile for corpus.db (db.dat)
11/08/06 14:44:03:250 -- (3888) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat -> Ind46.tmp
11/08/06 14:44:03:265 -- (3888) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat.prb -> Ind47.tmp
11/08/06 14:44:03:265 -- (3888) TBayesianThread - LoadFromFile for Corpus.db - setting Buffer size to 2313498
11/08/06 14:44:03:265 -- (3888) TBayesianThread - LoadFromFile for Corpus.db - Reading Buffer in mem
11/08/06 14:44:03:265 -- (3888) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - Ind46.tmp
11/08/06 14:44:03:281 -- (3888) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - Ind47.tmp
11/08/06 14:44:03:500 -- (3888) TBayesianThread - End LoadFromFile for corpus.db (db.dat) (234)
11/08/06 14:45:01:218 -- (1388) Blacklist cache - starting cleanup
11/08/06 14:46:01:218 -- (2656) Blacklist cache - starting cleanup
11/08/06 14:47:01:218 -- (2316) Blacklist cache - starting cleanup
11/08/06 14:48:01:234 -- (2104) Blacklist cache - starting cleanup
11/08/06 14:49:01:312 -- SpamFilter.INI was updated...
11/08/06 14:49:01:671 -- Reloading local black / white lists: SpamFilter.ini
11/08/06 14:49:01:671 -- Reloading local black / white lists: excludedmail.txt
11/08/06 14:49:01:671 -- Reloading local black / white lists: whitelistdomains.txt
11/08/06 14:49:01:671 -- Reloading local black / white lists: bannesattach.txt
11/08/06 14:49:01:671 -- Reloading local black / white lists: unfilter.txt
11/08/06 14:49:01:671 -- Reloading local black / white lists: C:\Documents and Settings\Administrator\My Documents\domains.txt
11/08/06 14:49:01:671 -- Reloading local black / white lists: C:\Program Files\SpamFilter\AllowedDomainFilterMatrix.txt
11/08/06 14:49:04:500 -- SpamFilter.INI was updated...
11/08/06 14:49:04:875 -- Reloading local black / white lists: SpamFilter.ini
11/08/06 14:49:04:875 -- Reloading local black / white lists: excludedmail.txt
11/08/06 14:49:04:875 -- Reloading local black / white lists: whitelistdomains.txt
11/08/06 14:49:04:875 -- Reloading local black / white lists: bannesattach.txt
11/08/06 14:49:04:875 -- Reloading local black / white lists: unfilter.txt
11/08/06 14:49:04:875 -- Reloading local black / white lists: C:\Documents and Settings\Administrator\My Documents\domains.txt
11/08/06 14:49:04:875 -- Reloading local black / white lists: C:\Program Files\SpamFilter\AllowedDomainFilterMatrix.txt
11/08/06 14:49:45:140 -- SpamFilter.INI was updated...
11/08/06 14:49:47:531 -- SpamFilter.INI was updated...
11/08/06 14:49:47:890 -- Reloading local black / white lists: SpamFilter.ini
11/08/06 14:49:47:890 -- Reloading local black / white lists: excludedmail.txt
11/08/06 14:49:47:890 -- Reloading local black / white lists: whitelistdomains.txt
11/08/06 14:49:47:890 -- Reloading local black / white lists: bannesattach.txt
11/08/06 14:49:47:890 -- Reloading local black / white lists: unfilter.txt
11/08/06 14:49:47:890 -- Reloading local black / white lists: C:\Documents and Settings\Administrator\My Documents\domains.txt
11/08/06 14:49:47:890 -- Reloading local black / white lists: C:\Program Files\SpamFilter\AllowedDomainFilterMatrix.txt
11/08/06 14:49:47:906 -- SpamFilter ISP v2.7.1.532 Listening on 192.168.0.23:25,
11/08/06 14:49:47:906 -- Exception occurred during UpdateSMTPSettings: Could not bind socket. Address and port are already in use.
11/08/06 14:49:48:906 -- SpamFilter.INI was updated...
11/08/06 14:49:49:171 -- Reloading local black / white lists: SpamFilter.ini
11/08/06 14:49:49:171 -- Reloading local black / white lists: excludedmail.txt
11/08/06 14:49:49:171 -- Reloading local black / white lists: whitelistdomains.txt
11/08/06 14:49:49:171 -- Reloading local black / white lists: bannesattach.txt
11/08/06 14:49:49:171 -- Reloading local black / white lists: unfilter.txt
11/08/06 14:49:49:171 -- Reloading local black / white lists: C:\Documents and Settings\Administrator\My Documents\domains.txt
11/08/06 14:49:49:171 -- Reloading local black / white lists: C:\Program Files\SpamFilter\AllowedDomainFilterMatrix.txt
11/08/06 14:50:49:171 -- (2416) Blacklist cache - starting cleanup
11/08/06 14:51:49:171 -- (2272) Blacklist cache - starting cleanup
11/08/06 14:52:49:171 -- (304) Blacklist cache - starting cleanup
11/08/06 14:53:49:171 -- (3156) Blacklist cache - starting cleanup
11/08/06 14:54:03:500 -- (3888) Begin Sync Corpus.db
11/08/06 14:54:03:500 -- (3888) Sync Corpus.db pass 0a
11/08/06 14:54:03:500 -- (3888) Sync Corpus.db pass 0b
11/08/06 14:54:03:500 -- (3888) Sync Corpus.db pass 0c
11/08/06 14:54:03:500 -- (3888) Sync Corpus.db - 166997 - 0
11/08/06 14:54:03:500 -- (3888) Sync Corpus.db pass 1 (0)
11/08/06 14:54:03:812 -- (3888) Sync Corpus.db pass 2 (311)
11/08/06 14:54:03:812 -- (3888) Sync Corpus.db pass 3 (311)
11/08/06 14:54:03:812 -- (3888) Sync Corpus.db pass 4 (311)
11/08/06 14:54:03:828 -- (3888) Sync Corpus.db pass 5 (328)
11/08/06 14:54:03:890 -- (3888) Sync Corpus.db pass 6 (389)
11/08/06 14:54:03:890 -- (3888) Sync Corpus.db pass 7 (389)
11/08/06 14:54:03:890 -- (3888) Sync Corpus.db pass 8 (389)
11/08/06 14:54:03:890 -- (3888) End Sync Corpus.db (389)
11/08/06 14:54:04:296 -- Bayesian Thread is not running - starting...
11/08/06 14:54:04:296 -- (3872) BayesianThread starting
11/08/06 14:54:04:296 -- (3872) TBayesianThread - Begin LoadFromFile for corpus.db (db.dat)
11/08/06 14:54:04:296 -- (3872) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat -> Ind4A.tmp
11/08/06 14:54:04:296 -- (3872) TBayesianThread - LoadFromFile for Corpus.db - copied db.dat.prb -> Ind4B.tmp
11/08/06 14:54:04:296 -- (3872) TBayesianThread - LoadFromFile for Corpus.db - setting Buffer size to 2313498
11/08/06 14:54:04:296 -- (3872) TBayesianThread - LoadFromFile for Corpus.db - Reading Buffer in mem
11/08/06 14:54:04:312 -- (3872) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - Ind4A.tmp
11/08/06 14:54:04:312 -- (3872) TBayesianThread - LoadFromFile for Corpus.db - loaded files in memory - Ind4B.tmp
11/08/06 14:54:04:562 -- (3872) TBayesianThread - End LoadFromFile for corpus.db (db.dat) (266)
11/08/06 14:54:49:171 -- (3908) Blacklist cache - starting cleanup
11/08/06 14:55:49:171 -- (1432) Blacklist cache - starting cleanup
11/08/06 14:56:49:171 -- (2920) Blacklist cache - starting cleanup
11/08/06 14:57:49:171 -- (4076) Blacklist cache - starting cleanup

After several reboots, both of the workstations and the server, the aforementioned kept popping up. At present, I am quite frustrated and welcome any suggestions on how I can ensure all incoming (legit) ones are coming through to our users?

Paul




Replies:
Posted By: LogSat
Date Posted: 08 November 2006 at 4:37pm
Paul,

Please ignore the email I just sent you, as now I also saw your post and I assume the issue is the same.

The issue you're having is that there is another application that is using port 25 on the server with SpamFilter. Please see the following line inthe logfile:

11/08/06 14:44:01:218 -- Exception occurred during UpdateSMTPSettings: Could not bind socket. Address and port are already in use.

Do you have any other mail server software runnning on the server, or mail-enabled antivirus software? If so, please ensure that nothing is using port 25 on the IP 192.168.0.23.

You can try to see what the faulty application is by opening an MSDOS prompt on the SpamFilter server, and issue the command:

telnet 192.168.0.23 25

you should receive a welcome banner from whatever application is using port 25, and the text in the banner will hopefully tell you what the application is.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: apaul
Date Posted: 08 November 2006 at 5:05pm
Roberto:

It was the port. Thanks for suggestion.



Print Page | Close Window