Mailflow stops until the GFI MailEssentials Scan Service is restarted due to SURBL

Versions / Builds Affected

2012 / All

Status

Resolved

Problem Summary

Inbound and outbound mailflow stops. Mails start queueing in IIS queues resp. Exchange submission queue. On Exchange 2007 and 2010 Event Logs show; GfiAsRtSubmittedAgent' exceeded 90000 / 300000 milliseconds

TT / JIRAID

982

How to Identify

Mailflow problems are very difficult to troubleshoot because they can have many different causes. It is therefore essential to have logs which show the time the problem started. There are some general symptoms which can help to identify this problem: - Mailflow problem is reported - All mails queue in IIS queue / Exchange Submission queue - GfiAsRtSubmittedAgent exceeded 90000 / 300000 milliseconds Event Logs can be found on Exchange Server 2007/2010 - Restarting the MailEssentials AntiSpam Scan Service "solves" the problem temporary - Problem happens randomly once a week / every couple of days To further analyze the problem the customer MUST run the troubleshooter while the problem is still happening, before restarting any services to capture the moment. Analyzing the logs, you would find the last mail to be processed by SURBL. The log just stops: 2013-04-03,08:02:51,599,1,"#00000a4c","#00001014","info ","ase_surbl","[1:144][155820.DO] Jobs pending [23]..." 2013-04-03,08:02:51,615,1,"#00000a4c","#00001064","info ","ase_surbl","[3:144][1042225.155820.DO] Fetching ... ok" 2013-04-03,08:02:51,615,1,"#00000a4c","#00001064","warning","ase_surbl","[3:144][1042225.155820.DO] Lookup failed: Interrupted." 2013-04-03,08:02:51,615,1,"#00000a4c","#00001064","info ","ase_surbl","Current LookupID[144] - Finished Thread LookupID[144]..." 2013-04-03,08:02:51,615,1,"#00000a4c","#00001064","info ","ase_surbl","[3:144][1042225.155820.DO] Jobs pending [22]..."

Workaround / Fix Details

Upgrade to latest build of GFI MailEssentials 2015 or Later

Required Actions

Upgrade to latest build of GFI MailEssentials 2015 or Later