Spam Filter ISP Forums : spamfilter has stalled twice in last 2 days https://www.logsat.com/spamfilter/forums/ Thu, 18 Jun 2026 00:45:28 +0000 Mon, 01 Sep 2014 09:48:40 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=7096 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[spamfilter has stalled twice in last 2 days : Yes we have an automated process...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14650&title=spamfilter-has-stalled-twice-in-last-2-days#14650 Author: Terry
Subject: 7096
Posted: 01 September 2014 at 9:48am

Yes we have an automated process that shuts down the spamfilter service at 6am and restarts it a few minutes later....and when it was stalled the service was still running however we could not get to the gui.  We could however at least once restart the service and get it running (I did not find it the second time I believe the person restarted the server )]]> Mon, 01 Sep 2014 09:48:40 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14650&title=spamfilter-has-stalled-twice-in-last-2-days#14650 <![CDATA[spamfilter has stalled twice in last 2 days : Terry,We&#039;re still looking...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14649&title=spamfilter-has-stalled-twice-in-last-2-days#14649 Author: LogSat
Subject: 7096
Posted: 31 August 2014 at 8:35pm

Terry,

We're still looking to see if there are commonalities between the two logs at the time spamFilter stopped processing traffic.

In the meantime, we see that on both days at 6AM SpamFilter was stopped than then restarted a few seconds later:

08/27/14 06:00:03:102 -- Shutting down all threads. Please wait up to 15-20 seconds....
08/27/14 06:00:12:774 -- SpamFilter ISP v4.6.0.113 Listening on all IPs port 25 - SSL port 465 (64bit service mode)
...............
08/27/14 15:00:20:926   SpamFilter stopped with no reason


08/29/14 06:00:02:968 -- Shutting down all threads. Please wait up to 15-20 seconds....
08/29/14 06:00:09:894 -- SpamFilter ISP v4.6.0.113 Listening on all IPs port 25 - SSL port 465 (64bit service mode)
...............
08/29/14 07:01:11:423   SpamFilter stopped with no reason


Is there an automated process that caused this to happen? If so, does it only occur at 6AM?
When SpamFilter stopped processing traffic (times in bold above), when you logged onto the server did you still see SpamFilter's GUI on screen (or the SpamFilterSvc.exe process running), or did SpamFilter completely crash/shutdown?
]]> Sun, 31 Aug 2014 20:35:11 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14649&title=spamfilter-has-stalled-twice-in-last-2-days#14649 <![CDATA[spamfilter has stalled twice in last 2 days : I have uploaded the logfile...you...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14648&title=spamfilter-has-stalled-twice-in-last-2-days#14648 Author: Terry
Subject: 7096
Posted: 31 August 2014 at 10:19am

I have uploaded the logfile...you should see it stopped at 3pm and we did not catch the fact that it was not running till the next morning...]]> Sun, 31 Aug 2014 10:19:01 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14648&title=spamfilter-has-stalled-twice-in-last-2-days#14648 <![CDATA[spamfilter has stalled twice in last 2 days : Yes, I saw several incomplete...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14647&title=spamfilter-has-stalled-twice-in-last-2-days#14647 Author: LogSat
Subject: 7096
Posted: 30 August 2014 at 7:24pm

Yes, I saw several incomplete uploads. As an upgrade of the OwnCloud website was due anyways, we proceeded with the upgrade just now. Could you please try again to see if that works? 

If not, unless you have a URL where I can download them from your website, I can setup an FTP site for you to upload.

I'm sorry for the trouble,

Roberto
]]> Sat, 30 Aug 2014 19:24:28 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14647&title=spamfilter-has-stalled-twice-in-last-2-days#14647 <![CDATA[spamfilter has stalled twice in last 2 days : still unable to upload the...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14646&title=spamfilter-has-stalled-twice-in-last-2-days#14646 Author: Terry
Subject: 7096
Posted: 30 August 2014 at 9:43am

still unable to upload the second log...do you need to send me another upload link?]]> Sat, 30 Aug 2014 09:43:40 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14646&title=spamfilter-has-stalled-twice-in-last-2-days#14646 <![CDATA[spamfilter has stalled twice in last 2 days : the shutdown is scheduled...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14645&title=spamfilter-has-stalled-twice-in-last-2-days#14645 Author: Terry
Subject: 7096
Posted: 30 August 2014 at 9:36am

the shutdown is scheduled every day at 6am so this was expected.  Still trying to figure out how to upload the second log...the upload to the cloud doesn't seem to take yet...]]> Sat, 30 Aug 2014 09:36:57 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14645&title=spamfilter-has-stalled-twice-in-last-2-days#14645 <![CDATA[spamfilter has stalled twice in last 2 days : Terry,We received the files, thank...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14644&title=spamfilter-has-stalled-twice-in-last-2-days#14644 Author: LogSat
Subject: 7096
Posted: 29 August 2014 at 11:19pm

Terry,

We received the files, thank you. While we're still going thru the logs, I noticed that SpamFilter was shut down gracefully at exactly 6:00AM, and restarted a few seconds after that. Then just like you said, an hour and a minute afterwards at 7:01 all activity simply stops.
Could you please confirm that the shutdown at 6AM was either performed by a scheduled task or performed manually by an admin, so we can eliminate it from being related to the issue an hour later?

Also, could you please also upload us the logfile for the previous time this happened, in the hope we see some correlating events?

Thanks,

Roberto
]]> Fri, 29 Aug 2014 23:19:50 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14644&title=spamfilter-has-stalled-twice-in-last-2-days#14644 <![CDATA[spamfilter has stalled twice in last 2 days : Terry,We&#039;d need to see the...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14643&title=spamfilter-has-stalled-twice-in-last-2-days#14643 Author: LogSat
Subject: 7096
Posted: 29 August 2014 at 4:54pm

Terry,

We'd need to see the entire SpamFilter activity logfile to get a better idea of what is happening. Can you please zip us the following so we can take a look:

• SpamFilter's activity logfile for today

• The \SpamFilter\Domains directory structure (if the files containing any of your blacklists/whitelists are outside that directory tree, please include those as well.


If the zipped file is over 8MB in size, I'll send you via PM the URL where you can upload the file.


]]> Fri, 29 Aug 2014 16:54:20 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14643&title=spamfilter-has-stalled-twice-in-last-2-days#14643 <![CDATA[spamfilter has stalled twice in last 2 days : I am on v4.6.0.113. Twice...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14642&title=spamfilter-has-stalled-twice-in-last-2-days#14642 Author: Terry
Subject: 7096
Posted: 29 August 2014 at 11:59am

I am on v4.6.0.113.  Twice during the last 2 days spamfilter has stalled and stops processing transactions.  I can't see anything meaningful in the logs just a break in the processing until we either restart the service of reboot the machine...nothing shows in the event logs either...
here is an excerpt from the logs:
 
08/29/14 07:01:11:423 -- (256260240) Detected TCP Connection: 181.31.207.65
08/29/14 07:01:11:423 -- (105656384) Resolving 50.194.112.129 - 50-194-112-129-static.hfc.comcastbusiness.net
08/29/14 07:01:11:423 -- (256260240) Connection from: 181.31.207.65  -  Originating country : Argentina
08/29/14 07:01:11:423 -- (256260240) GreyList limbo - Added 181.31.207.65
08/29/14 07:01:11:423 -- (256260240) IP is in not in GreyList Allowed. Disconnecting: 181.31.207.65
08/29/14 07:01:11:423 -- (256260240) No Data Received
08/29/14 07:01:11:423 -- (256260240) Disconnect
08/29/14 08:07:31:018 -- SpamFilter ISP v4.6.0.113 Listening on all IPs port 25 - SSL port 465 (64bit service mode)
08/29/14 08:07:31:720 -- (93876864) Found new domain in tbl_LocalDomains: SFI. Creating new FilterObject
08/29/14 08:07:31:861 -- (93876864) Detected differences in file timestamps - forcing DB export
08/29/14 08:07:31:923 -- (93876864) Reloading filter.ini: domains\SFI\Filters.ini
08/29/14 08:07:31:923 -- (93876864) Reloading file for tbl_LocalDomains: domains\SFI\AllowedDomains.txt (93 bytes)
08/29/14 08:07:32:032 -- (93876864) Reloading file for tblWL_EmailsFrom: domains\SFI\excludefrom.txt (1090 bytes)
 
]]> Fri, 29 Aug 2014 11:59:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=7096&PID=14642&title=spamfilter-has-stalled-twice-in-last-2-days#14642