efa-project.org

Hi There,

It would seem we had a power cut this morning and upon turning the mail-scanner back on, everything looked fine. I then noticed the queue was getting bigger and bigger so I clicked on it and didn't get what I was expecting. (Please see attachment)

I rebooted the machine, ran all updates and even a restore but all lead to the same result. I have temporarily moved all clients over to a backup system whilst we resolve this one.

I don't know if this is related but we have just has one client let us know of 2 messages she has received recently:

MailScanner was attacked by a Denial Of Service attack, and has
therefore deleted this part of the message. Please contact your e-mail
providers for more information if you need it, giving them the whole of
this report. Attack in:
/var/spool/MailScanner/incoming/13209/ED8E31054A4.A5556/nmsg-13209-50.ht
ml -- This message was scanned by A1 IT Solutions Ltd. ESVA (Email
Security Virtual Appliance) and is believed to be clear of all viruses
and other malicious content.

Second one ..

MailScanner was attacked by a Denial Of Service attack, and has
therefore deleted this part of the message. Please contact your e-mail
providers for more information if you need it, giving them the whole of
this report. Attack in:
/var/spool/MailScanner/incoming/13209/1F5C01054D4.AB4E8/nmsg-13209-30.ht
ml -- This message was scanned by A1 IT Solutions Ltd. ESVA (Email
Security Virtual Appliance) and is believed to be clear of all viruses
and other malicious content.

I haven't has time to investigate this just yet but I was hoping you guys had some idea of what's going and any help would be very much appreciated!

Thanks,

Ash!

**UPDATE**

The queue does slowly appear to be clearing and has gone from 598 down to 433 in about an hour.

I do still have the the problem with viewing the queue though

I see a few 'weird' items there.

This message was scanned by A1 IT Solutions Ltd. ESVA (Email
Security Virtual Appliance) and is believed to be clear of all viruses
and other malicious content.

ESVA? do you still have esva systems around or something? these messages can not be send from an E.F.A. system.



Is your system using a whole lot of cpu power (100% all the time?) if so try to limit down the mailscanner childs, having to many is not a good practice ( I recommend max 1 child per CPU)


About the interface, I have seen that once during testing but never could re-produce it, so never found the reason why or how to fix this.
You do are on the latest version from E.F.A. ? (run EFA-Update from the console)