请大家帮帮忙：Imail8.22频繁出现Stop pending导致收发不正常

by28com

Imail8.22 用户数不多，原来好好的，但是这两天Queue总是动不动就出现Stop pending的状态。必须用进程管理器结束掉Queuemgr服务的进程，才能重启它。但过不了5分钟问题又重演，如此频繁真是受不了了。观察了下，每次出现这情况去查spool，并没发现太多的队列，没超过15个。但为什么也就老是会出现Stop pending呢？？
以下是spool中的日志：

<jwsb@gzxk268.cn
03:11 11:17 SMTPD(2d2f015d0000025e) [0.0.0.0] connect 203.200.217.70 port 5464
03:11 11:17 SMTPD(2d2f015d0000025e) [203.200.217.70] EHLO illhyd-static-203.200.217.70.vsnl.net.in
03:11 11:17 SMTPD(2d2f015d0000025e) [203.200.217.70] MAIL FROM: <solomana@zdnetasia.com>
03:11 11:17 SMTPD(2d3001630000025f) [0.0.0.0] connect 121.33.148.18 port 29839
03:11 11:17 SMTPD(2d2f015d0000025e) [203.200.217.70] RCPT TO: <festoon@gzcityf.com>
03:11 11:17 SMTPD(2d2f015d0000025e) [203.200.217.70] ERR by28-2a7b4a10ce invalid user <festoon@gzcityf.com
03:11 11:17 SMTPD(2d3001630000025f) [121.33.148.18] EHLO ziyuanpharm.com
03:11 11:17 SMTPD(2d3001630000025f) [121.33.148.18] MAIL FROM:<tjrttewrwqo@ziyuanpharm.com>
03:11 11:17 SMTPD(2d3001630000025f) [121.33.148.18] RCPT TO:<jvsen@jvsen.com>
03:11 11:17 SMTPD(2d3001630000025f) [121.33.148.18] ERR by28-2a7b4a10ce invalid user <jvsen@jvsen.com
03:11 11:17 SMTPD(2d31013c00000260) [0.0.0.0] connect 211.155.16.61 port 3291
03:11 11:17 SMTPD(2d38016900000261) [0.0.0.0] connect 123.245.128.14 port 36752
03:11 11:17 SMTPD(2d38016900000261) [123.245.128.14] ehlo textile-tj.com
03:11 11:17 SMTPD(2d38016900000261) [123.245.128.14] Mail from:<jherasytugy@textile-tj.com>
03:11 11:17 SMTPD(2d38016900000261) [123.245.128.14] RCPT to:<jiajiefashion@jiajie168.com>
03:11 11:17 SMTPD(2d38016900000261) [123.245.128.14] ERR by28-2a7b4a10ce invalid user <jiajiefashion@jiajie168.com
03:11 11:17 SMTPD(2d45015a00000262) [0.0.0.0] connect 219.134.112.31 port 62550
03:11 11:17 SMTPD(2d45015a00000262) [219.134.112.31] EHLO mail.smct.com.tw
03:11 11:17 SMTPD(2d45015a00000262) [219.134.112.31] MAIL FROM:<hbfdh56@mail.smct.com.tw>
03:11 11:17 SMTPD(2d45015a00000262) [219.134.112.31] RCPT TO:<gzcqa@gzcqa.com>
03:11 11:17 SMTPD(2d45015a00000262) [219.134.112.31] ERR by28-2a7b4a10ce invalid user <gzcqa@gzcqa.com
03:11 11:17 SMTPD(2d47015200000263) [0.0.0.0] connect 121.33.64.244 port 3597
03:11 11:17 SMTPD(2d47015200000263) [121.33.64.244] ehlo conbagroup.com
03:11 11:17 SMTPD(2d4700a800000264) [0.0.0.0] connect 222.219.96.30 port 2190
03:11 11:17 SMTPD(2d4700a800000264) [222.219.96.30] HELO longyang.gov.cn
03:11 11:17 SMTPD(2d4700a800000264) [222.219.96.30] mail from: <kgifds@longyang.gov.cn>
03:11 11:17 SMTPD(2d4700a800000264) [222.219.96.30] rcpt to: <by28@by28.com>
03:11 11:17 SMTPD(2d4700a800000264) [222.219.96.30] d:\IMail\spool\D2d4700a800000264.SMD 2890
03:11 11:17 SMTPD(2d4700a800000264) performing antispam checks
03:11 11:17 SMTPD(2d47015200000263) [121.33.64.244] Mail from:<xintong@conbagroup.com>
03:11 11:17 SMTPD(2d47015200000263) [121.33.64.244] RCPT to:<sales@gbrchina.cn>
03:11 11:17 SMTPD(2d47015200000263) [121.33.64.244] ERR by28-2a7b4a10ce invalid user <sales@gbrchina.cn
03:11 11:17 SMTPD(2d4d00a100000266) [0.0.0.0] connect 220.168.175.108 port 4278
03:11 11:17 SMTPD(2d4d00a100000266) [220.168.175.108] EHLO bingxiang.com
03:11 11:17 SMTPD(2d4d00a100000266) [220.168.175.108] MAIL FROM: <qohng@bingxiang.com>
03:11 11:17 SMTPD(2d4d00a100000266) [220.168.175.108] RCPT TO: <bgs@watkinson-international.com>
03:11 11:17 SMTPD(2d4d00a100000266) [220.168.175.108] ERR by28-2a7b4a10ce invalid user <bgs@watkinson-international.com
03:11 11:17 SMTPD(2d5d017500000267) [0.0.0.0] connect 121.33.148.18 port 30476
03:11 11:17 SMTPD(2d5d017500000267) [121.33.148.18] EHLO zhongyichem.com
03:11 11:17 SMTPD(2d5d017500000267) [121.33.148.18] MAIL FROM:<uiytyeteiuoy@zhongyichem.com>
03:11 11:17 SMTPD(2d5d017500000267) [121.33.148.18] RCPT TO:<jwsb@gzxk268.cn>
03:11 11:17 SMTPD(2d5d017500000267) [121.33.148.18] ERR by28-2a7b4a10ce invalid user <jwsb@gzxk268.cn
03:11 11:17 SMTPD(2d64016f00000268) [0.0.0.0] connect 203.86.20.166 port 3893
03:11 11:17 SMTPD(2d64016f00000268) [203.86.20.166] ehlo sohu.com
03:11 11:17 SMTPD(2d64016f00000268) [203.86.20.166] Mail from:<gh168gh@sohu.com>
03:11 11:17 SMTPD(2d64016f00000268) [203.86.20.166] RCPT to:<chaoyan@chaoyan.com.cn>
03:11 11:17 SMTPD(2d64016f00000268) [203.86.20.166] ERR by28-2a7b4a10ce invalid user <chaoyan@chaoyan.com.cn
03:11 11:18 SMTPD(2d68015d00000269) [0.0.0.0] connect 115.138.4.75 port 4280
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] EHLO WCOZPLT
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] MAIL FROM: <acceptancesozp3@lcracing.com>
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] RCPT TO: <system.mailby28@by28.com>
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] ERR by28-2a7b4a10ce invalid user <system.mailby28@by28.com
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] MAIL FROM: <clotheslinedd@finishedart.com>
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] RCPT TO: <system.mailby28@by28.com>
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] ERR by28-2a7b4a10ce invalid user <system.mailby28@by28.com
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] MAIL FROM: <foundationsc094@go2valencia.com>
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] RCPT TO: <system.mailby28@by28.com>
03:11 11:18 SMTPD(2d68015d00000269) [115.138.4.75] ERR by28-2a7b4a10ce invalid user <system.mailby28@by28.com
03:11 11:18 SMTPD(2d6b01630000026a) [0.0.0.0] connect 121.33.148.18 port 30695
03:11 11:18 SMTPD(2d6b01630000026a) [121.33.148.18] EHLO consultoresglobales.com
03:11 11:18 SMTPD(2d6b01630000026a) [121.33.148.18] MAIL FROM:<wefthjtrdtfer@consultoresglobales.com>
03:11 11:18 SMTPD(2d6b01630000026a) [121.33.148.18] RCPT TO:<jvsen@jvsen.com>
03:11 11:18 SMTPD(2d6b01630000026a) [121.33.148.18] ERR by28-2a7b4a10ce invalid user <jvsen@jvsen.com
03:11 11:18 SMTPD(2d6d013c0000026b) [0.0.0.0] connect 211.155.16.61 port 2710
03:11 11:18 SMTPD(2d7d01690000026c) [0.0.0.0] connect 190.71.46.47 port 51862
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] EHLO dsldevice.lan
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] MAIL FROM: <novels66@decomstar.com>
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] RCPT TO: <qvtz@by28.com>
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] ERR by28-2a7b4a10ce invalid user <qvtz@by28.com
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] MAIL FROM: <postponingt35@publidetallsdreamms.com>
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] RCPT TO: <qvtz@by28.com>
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] ERR by28-2a7b4a10ce invalid user <qvtz@by28.com
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] MAIL FROM: <maddensso373@lehuit.com>
03:11 11:18 SMTPD(2d84015a0000026d) [0.0.0.0] connect 211.151.253.70 port 35054
03:11 11:18 SMTPD(2d84015a0000026d) [211.151.253.70] EHLO mx70.mail.chinahr.com
03:11 11:18 SMTPD(2d84015a0000026d) [211.151.253.70] MAIL FROM:<ApplyCV_16@mx88.mail.chinahr.com>
03:11 11:18 SMTPD(2d84015a0000026d) [211.151.253.70] RCPT TO:<gzcf@gzcityf.com>
03:11 11:18 SMTPD(2d84015a0000026d) [211.151.253.70] d:\IMail\spool\D2d84015a0000026d.SMD 8050
03:11 11:18 SMTPD(2d84015a0000026d) performing antispam checks
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] RCPT TO: <qvtz@by28.com>
03:11 11:18 SMTPD(2d7d01690000026c) [190.71.46.47] ERR by28-2a7b4a10ce invalid user <qvtz@by28.com
03:11 11:18 SMTPD(2d8600a80000026f) [0.0.0.0] connect 220.168.175.2 port 3179
03:11 11:18 SMTPD(2d8600a80000026f) [220.168.175.2] EHLO shengxin-gd.com
03:11 11:18 SMTPD(2d8600a80000026f) [220.168.175.2] MAIL FROM: <vsoiwlji@shengxin-gd.com>
03:11 11:18 SMTPD(2d8600a80000026f) [220.168.175.2] RCPT TO: <ceo@jiajie168.com>
03:11 11:18 SMTPD(2d8600a80000026f) [220.168.175.2] ERR by28-2a7b4a10ce invalid user <ceo@jiajie168.com
03:11 11:18 SMTPD(2d93015200000270) [0.0.0.0] connect 121.33.41.77 port 3460
03:11 11:18 SMTPD(2d93015200000270) [121.33.41.77] ehlo gtlandmark.com
03:11 11:18 SMTPD(2d93015200000270) [121.33.41.77] Mail from:<tgygvsd53@gtlandmark.com>
03:11 11:18 SMTPD(2d93015200000270) [121.33.41.77] RCPT to:<info@haoyangyy.com>
03:11 11:18 SMTPD(2d93015200000270) [121.33.41.77] d:\IMail\spool\D2d93015200000270.SMD 7318
03:11 11:18 SMTPD(2d93015200000270) performing antispam checks
03:11 11:18 SMTPD(2d9700a100000272) [0.0.0.0] connect 60.14.8.38 port 44302
03:11 11:18 SMTPD(2d9700a100000272) [60.14.8.38] EHLO YMKPCMPUMM
03:11 11:18 SMTPD(2d97017500000273) [0.0.0.0] connect 123.17.170.215 port 2264
03:11 11:18 SMTPD(2d97017500000273) [123.17.170.215] EHLO [123.17.170.215]
03:11 11:18 SMTPD(2d97017500000273) [123.17.170.215] MAIL FROM:<kefxixadiz@xixa.de>
03:11 11:18 SMTPD(2d97017500000273) [123.17.170.215] RCPT TO: <sysweb@ever-shining.com>
03:11 11:18 SMTPD(2d97017500000273) [123.17.170.215] ERR by28-2a7b4a10ce invalid user <sysweb@ever-shining.com
03:11 11:19 SMTPD(2da9016f00000274) [0.0.0.0] connect 211.155.16.61 port 2201
03:11 11:19 SMTPD(2dab015d00000275) [0.0.0.0] connect 121.33.148.18 port 31484
03:11 11:19 SMTPD(2dab015d00000275) [121.33.148.18] EHLO transpromotion.com
03:11 11:19 SMTPD(2dab015d00000275) [121.33.148.18] MAIL FROM:<hgjfrrwqerwq@transpromotion.com>
03:11 11:19 SMTPD(2dab015d00000275) [121.33.148.18] RCPT TO:<jwsb@gzxk268.cn>
03:11 11:19 SMTPD(2dab015d00000275) [121.33.148.18] ERR by28-2a7b4a10ce invalid user <jwsb@gzxk268.cn

by28com

急呀。。就没人遇到这种情况吗？自己顶一下。。

ineedrmb

822本身不存在队列服务的问题，如果还是出现建议排查其它软件是否存在冲突。

by28com

不知是不是因为ICS2.0的问题。之前好好的，后面装了ICS后发现无法激活就把它卸载后重启重装了Imail8.22，然后就一直出现这个问题。不停的出现。没有装别的软件了。。。。。苦呀。。版主有没有解救的方法？快救救我吧。。
补充下：在没有装ICS2.0前用的也是Imail8.22是正常的。后面重装后只能收不能发，结果发现IIS中也有装SMTP，就把IIS中的SMTP卸载掉，只要队列服务是启动的就能正常收发。便没过1两分钟就意外停止了。。

大家快来研究下这是怎么回事吧？实在是搞得我莫名其妙了。。

[ 本帖最后由 by28com 于 2009-3-12 17:03 编辑 ]

lgj858

看看是不是防毒软件监控了25端口

by28com

服务器上没有装防毒、杀毒软件。本地防火墙也是关闭的。用的是WINDOWS2003

mysql99

最近也出现这情况，大家快看看。。怪，原先没有这情况，这几天才发生，是不是imail发起攻击？

by28com

imail发起攻击???不是吧，从日志里看不到什么异常呀，你用的是什么版本的？2006的那个是不是比8.22要高级，我还打算看看升级能不能解决问题呢。

mysql99

Imail8.22,，怪，原先都是好的。就最近几天出的问题。。。。。。。imail后门。。

lgj858

没有这样的漏洞