Email and Server Security leaking

nick_

Hello,

 

We've been using F-Secure Email and Server Security for some time and been quite pleased with the product. Some days ago there's been a change in the functionality with this product. We started to receive a lot of spams on our mailbox server without the Email and Server Security beign able to scan the messages. It apperars that the Email and Server Security is being able to scan only sporadic messages on the mail flow. Does anybody else have this kind of problem or know any resolution for it?

 

The spams leaked have had either of the following strings in the  internet headers

X-Spam-Status: NO, hits=0 required=5, database-version=[2015-09-14_01],
 tests=BD_ERROR=unknown, error: unknown error (code c000041a). Build:
 [Engines: 2.15.6.774, Stamp: 3], Multi: [Enabled, t: (0.033863,0.033839)],
 BW: [Enabled, t: (0.000017,0.000002)], RTDA: [Enabled, t: (0.339192), Hit:
 No, Details: Error: ssl(50)], total: 0(675)=3,e.BD=1

 

X-Spam-Status: NO, hits=0 required=5, database-version=[2015-09-14_01],
 tests=BD_ERROR=16, error: no response from cloud.. Build: [Engines:
 2.15.6.774, Stamp: 3], Multi: [Enabled, t: (0.022425,0.022410)], BW:
 [Enabled, t: (0.000018,0.000002)], RTDA: [Enabled, t: (3.298155), Hit: No,
 Details: Error: nullResponse], total: 0(675)=3,e.BD=1
X-MS-Exchange-Organization-SCL: 0

 

Thanks

etomcat

Hello,

 

> Some days ago there's been a change in the functionality with this product.

 

There was a faulty F-Secure Gemini database update release some days ago. There is a chance your server didn't recover automagically as it was supposed to do upon reception of the next automatic update push?

 

But I have no idea how spam-scanning could be connected to the Gemini engine (a 32-bit file scanner that hunts viruses heuristically)?

 

I think you could download and run the FS-AUA-Reset tool as the first effort in troubles-hooting:

ftp://ftp.f-secure.com/support/tools/FSAUA-Reset/

 

Yours Sincerely: Tamas Feher, 2F 2000 Kft., Hungary.

 

nick_

Thank for the tip, it wasn't the reason though.

 

After a complete uninstall and a re-install of the product it has been working properly again.