• wcSap

    From CHRIS ROSS@1:124/5013 to All on Thu Jan 31 19:18:36 2019
    Date: Sun, 26 Mar 2006 09:52:00 -0400
    From: CHRIS ROSS
    To: ALL
    Subject: wcSap
    Newsgroups: win.server.smtp.&.avs
    Message-ID: <1143384720.46.0@winserver.com>
    X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
    Lines: 54

    Just trying to understand my wcSAP log as I've had some comments of
    messages being bounced, but can't find them in the log. :

    Below, is this two messages being processed, or just one? And if it is two, how come the second part ends with a wcSAP 'finish' where you can tell if it was accepted or not, and the first part almost looks like it started processing, but then stopped?

    Chris

    20060319 22:09:00 000000a5 -------------------------------------
    20060319 22:09:00 000000a5 version : 1.62 / 1.54
    20060319 22:09:00 000000a5 calltype : SMTP
    20060319 22:09:00 000000a5 state : rcpt
    20060319 22:09:00 000000a5 cip : 204.225.44.16
    20060319 22:09:00 000000a5 cdn : rd1.dynip.com
    20060319 22:09:00 000000a5 from : <bbs@xanadubbs.ca>
    20060319 22:09:00 000000a5 hdn : rd1.dynip.com
    20060319 22:09:00 000000a5 rcpt : <transx@eshade.com>
    20060319 22:09:00 000000a5 ruid : 605
    20060319 22:09:00 000000a4 sapfilter : pass (time:81)
    20060319 22:09:00 000000a5 sapfilter : pass (time:40)
    20060319 22:09:00 000000a4 saprbl : pass (time:40)
    20060319 22:09:00 000000a5 saprbl : pass (time:50)

    20060319 22:09:00 000000a6 -------------------------------------
    20060319 22:09:00 000000a6 version : 1.62 / 1.54
    20060319 22:09:00 000000a6 calltype : SMTP
    20060319 22:09:00 000000a6 state : rcpt
    20060319 22:09:00 000000a6 cip : 204.225.44.16
    20060319 22:09:00 000000a6 cdn : rd1.dynip.com
    20060319 22:09:00 000000a6 from : <bbs@xanadubbs.ca>
    20060319 22:09:00 000000a6 hdn : rd1.dynip.com
    20060319 22:09:00 000000a6 rcpt : <transx@eshade.com>
    20060319 22:09:00 000000a6 ruid : 605
    20060319 22:09:00 000000a6 sapfilter : pass (time:20)
    20060319 22:09:00 000000a6 saprbl : pass (time:20)
    20060319 22:09:00 000000a4 sapspf : none (time:550)
    20060319 22:09:00 000000a6 sapspf : none (time:400)
    20060319 22:09:00 000000a5 sapspf : none (time:530)
    20060319 22:09:00 000000a4 sapcep : none (time:221)
    20060319 22:09:00 000000a6 sapcep : none (time:201)
    20060319 22:09:00 000000a4 sapcbv : disabled (time:0)
    20060319 22:09:00 000000a5 sapcep : none (time:211)
    20060319 22:09:01 000000a4 result : accept (-1)
    20060319 22:09:01 000000a6 sapcbv : disabled (time:0)
    20060319 22:09:01 000000a5 sapcbv : disabled (time:0)
    20060319 22:09:01 000000a4 wcsap finish (1132 msecs)
    20060319 22:09:01 000000a6 result : accept (-1)
    20060319 22:09:01 000000a6 wcsap finish (861 msecs)
    20060319 22:09:01 000000a5 result : accept (-1)
    20060319 22:09:01 000000a5 wcsap finish (1152 msecs)


    --- Platinum Xpress/Win/WINServer v3.1
    * Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)
  • From HECTOR SANTOS@1:124/5013 to All on Thu Jan 31 19:18:36 2019
    Date: Sun, 26 Mar 2006 18:24:30 -0400
    From: HECTOR SANTOS
    To: CHRIS ROSS
    Subject: Re: wcSap
    Newsgroups: win.server.smtp.&.avs
    Message-ID: <1143415535.46.1143384720@winserver.com>
    References: <1143384720.46.0@winserver.com>
    X-WcMsg-Attr: Rcvd
    X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
    Lines: 128

    The 3rd column is the session connection ID for the WCX child process. So
    all the 0000000A4 numbers is one session, and 000000A5 is another, etc.

    A good way to filter this is with a grep tool, or use the Windows FINDSTR command line utility. Type FINDSTR /? for help.


    Example, for your log:

    findstr /I /C:000000A4 wcsap.log

    20060319 22:09:00 000000a4 sapfilter : pass (time:81)
    20060319 22:09:00 000000a4 saprbl : pass (time:40)
    20060319 22:09:00 000000a4 sapspf : none (time:550)
    20060319 22:09:00 000000a4 sapcep : none (time:221)
    20060319 22:09:00 000000a4 sapcbv : disabled (time:0)
    20060319 22:09:01 000000a4 result : accept (-1)
    20060319 22:09:01 000000a4 wcsap finish (1132 msecs)

    You are missing the beginning stuff because I don't have the full log in
    your post here. But here is one with it is full:

    findstr /I /C:000000A5 wcsap.log

    20060319 22:09:00 000000a5 -------------------------------------
    20060319 22:09:00 000000a5 version : 1.62 / 1.54
    20060319 22:09:00 000000a5 calltype : SMTP
    20060319 22:09:00 000000a5 state : rcpt
    20060319 22:09:00 000000a5 cip : 204.225.44.16
    20060319 22:09:00 000000a5 cdn : rd1.dynip.com
    20060319 22:09:00 000000a5 from : <bbs@xanadubbs.ca>
    20060319 22:09:00 000000a5 hdn : rd1.dynip.com
    20060319 22:09:00 000000a5 rcpt : <transx@eshade.com>
    20060319 22:09:00 000000a5 ruid : 605
    20060319 22:09:00 000000a5 sapfilter : pass (time:40)
    20060319 22:09:00 000000a5 saprbl : pass (time:50)
    20060319 22:09:00 000000a5 sapspf : none (time:530)
    20060319 22:09:00 000000a5 sapcep : none (time:211)
    20060319 22:09:01 000000a5 sapcbv : disabled (time:0)
    20060319 22:09:01 000000a5 result : accept (-1)
    20060319 22:09:01 000000a5 wcsap finish (1152 msecs)

    I see you have a 000000A6 too, lets try that. This is a complete
    session:

    20060319 22:09:00 000000a6 -------------------------------------
    20060319 22:09:00 000000a6 version : 1.62 / 1.54
    20060319 22:09:00 000000a6 calltype : SMTP
    20060319 22:09:00 000000a6 state : rcpt
    20060319 22:09:00 000000a6 cip : 204.225.44.16
    20060319 22:09:00 000000a6 cdn : rd1.dynip.com
    20060319 22:09:00 000000a6 from : <bbs@xanadubbs.ca>
    20060319 22:09:00 000000a6 hdn : rd1.dynip.com
    20060319 22:09:00 000000a6 rcpt : <transx@eshade.com>
    20060319 22:09:00 000000a6 ruid : 605
    20060319 22:09:00 000000a6 sapfilter : pass (time:20)
    20060319 22:09:00 000000a6 saprbl : pass (time:20)
    20060319 22:09:00 000000a6 sapspf : none (time:400)
    20060319 22:09:00 000000a6 sapcep : none (time:201)
    20060319 22:09:01 000000a6 sapcbv : disabled (time:0)
    20060319 22:09:01 000000a6 result : accept (-1)
    20060319 22:09:01 000000a6 wcsap finish (861 msecs)

    In general, the logs is a dynamically appended so there will be mixed
    logging. A log analyzer will need to use the wcsap session id.

    Hope this helps.

    --
    Hector


    <CHRIS ROSS> wrote in message news:1143384720.46.0@winserver.com...
    Just trying to understand my wcSAP log as I've had some comments of
    messages being bounced, but can't find them in the log. :

    Below, is this two messages being processed, or just one? And if
    it is two, how come the second part ends with a wcSAP 'finish'
    where you can tell if it was accepted or not, and the first
    part almost looks like it started processing, but then stopped?

    Chris

    20060319 22:09:00 000000a5 -------------------------------------
    20060319 22:09:00 000000a5 version : 1.62 / 1.54
    20060319 22:09:00 000000a5 calltype : SMTP
    20060319 22:09:00 000000a5 state : rcpt
    20060319 22:09:00 000000a5 cip : 204.225.44.16
    20060319 22:09:00 000000a5 cdn : rd1.dynip.com
    20060319 22:09:00 000000a5 from : <bbs@xanadubbs.ca>
    20060319 22:09:00 000000a5 hdn : rd1.dynip.com
    20060319 22:09:00 000000a5 rcpt : <transx@eshade.com>
    20060319 22:09:00 000000a5 ruid : 605
    20060319 22:09:00 000000a4 sapfilter : pass (time:81)
    20060319 22:09:00 000000a5 sapfilter : pass (time:40)
    20060319 22:09:00 000000a4 saprbl : pass (time:40)
    20060319 22:09:00 000000a5 saprbl : pass (time:50)

    20060319 22:09:00 000000a6 -------------------------------------
    20060319 22:09:00 000000a6 version : 1.62 / 1.54
    20060319 22:09:00 000000a6 calltype : SMTP
    20060319 22:09:00 000000a6 state : rcpt
    20060319 22:09:00 000000a6 cip : 204.225.44.16
    20060319 22:09:00 000000a6 cdn : rd1.dynip.com
    20060319 22:09:00 000000a6 from : <bbs@xanadubbs.ca>
    20060319 22:09:00 000000a6 hdn : rd1.dynip.com
    20060319 22:09:00 000000a6 rcpt : <transx@eshade.com>
    20060319 22:09:00 000000a6 ruid : 605
    20060319 22:09:00 000000a6 sapfilter : pass (time:20)
    20060319 22:09:00 000000a6 saprbl : pass (time:20)
    20060319 22:09:00 000000a4 sapspf : none (time:550)
    20060319 22:09:00 000000a6 sapspf : none (time:400)
    20060319 22:09:00 000000a5 sapspf : none (time:530)
    20060319 22:09:00 000000a4 sapcep : none (time:221)
    20060319 22:09:00 000000a6 sapcep : none (time:201)
    20060319 22:09:00 000000a4 sapcbv : disabled (time:0)
    20060319 22:09:00 000000a5 sapcep : none (time:211)
    20060319 22:09:01 000000a4 result : accept (-1)
    20060319 22:09:01 000000a6 sapcbv : disabled (time:0)
    20060319 22:09:01 000000a5 sapcbv : disabled (time:0)
    20060319 22:09:01 000000a4 wcsap finish (1132 msecs)
    20060319 22:09:01 000000a6 result : accept (-1)
    20060319 22:09:01 000000a6 wcsap finish (861 msecs)
    20060319 22:09:01 000000a5 result : accept (-1)
    20060319 22:09:01 000000a5 wcsap finish (1152 msecs)


    --- Platinum Xpress/Win/WINServer v3.1
    * Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)
  • From CHRIS ROSS@1:124/5013 to All on Thu Jan 31 19:18:36 2019
    Date: Fri, 31 Mar 2006 07:35:34 -0400
    From: CHRIS ROSS
    To: HECTOR SANTOS
    Subject: Re: wcSap
    Newsgroups: win.server.smtp.&.avs
    Message-ID: <1143808534.46.1143415535@winserver.com>
    References: <1143415535.46.1143384720@winserver.com>
    X-WcMsg-Attr: Rcvd
    X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
    Lines: 13

    In general, the logs is a dynamically appended so there will be mixed logging. A log analyzer will need to use the wcsap session id.

    Hope this helps.

    Excellent as always Hector, I thought the information was appended to the
    log in a continous way as each e-mail was treated. By looking at it based on the session ID it makes a lot more sense.

    Thanks.

    Chris

    --- Platinum Xpress/Win/WINServer v3.1
    * Origin: Prison Board BBS Mesquite Tx //telnet.RDFIG.NET www. (1:124/5013)
  • From CHRIS ROSS@1:124/5013 to All on Thu Jan 31 19:18:36 2019
    Date: Thu, 06 Apr 2006 21:05:33 -0400
    From: CHRIS ROSS
    To: ALL
    Subject: wcSap
    Newsgroups: win.server.smtp.&.avs
    Message-ID: <1144371933.46.0@winserver.com>
    X-Mailer: Wildcat! Interactive Net Server v7.0.454.5
    Lines: 45

    I originally wrote a message about trying to figure out my wcSAP log. Thanks to Hector it makes a lot more sense, but I haven't solved the problem I was looking for.

    I use DyNip as my internet connection is DSL without a static IP. I use TRANSX to transfer packets via e-mail for a interbbs game. Since I installed wcSAP packets sometimes get (randomly) bounced from my system as SPAM
    with the error code 554.

    The bounce message looks like this:

    <begin cut>
    Remote host said: 554 Message Not Accepted by filter.

    --- Below this line is a copy of the message.

    Return-Path: <bbs@xanadubbs.ca>
    Received: (qmail 99505 invoked from network); 5 Apr 2006 14:08:52 -0000 Received: from s010600a0c9e568b2.ed.shawcable.net (HELO xanadubbs.ca) (68.148.246.109)
    by rd1.dynip.com with SMTP; 5 Apr 2006 14:08:52 -0000
    Message-ID: <1144242965.11.845.rex@xanadubbs.ca>
    Date: Wed, 05 Apr 2006 07:16:05 -700
    Mime-Version: 1.0
    X-Mailer: Internet Rex 2.67 beta 1
    X-RPID: CYE2BEX9V
    Subject: Transport
    From: bbs@xanadubbs.ca (Charles Cruden)
    To: transx@eshade.com
    Content-Type: text/plain; charset=us-ascii

    <end>

    All the packets always come from bbs@xanadubbs.ca, with the same
    subject. So I don't understand why only some are getting bounced. Even
    more perplexing, I can't find any mention of it getting bounced in wcsap.log

    Does anyone have any ideas? I tried adding 'bbs@xanadubbs.ca' to the
    ACCEPT part of the filter file (using %from%). But it refuses the odd packet.

    Did I not add it right? Is there something e