Hi all!

Since this afternoon, my iis-smtp service (windows 2000sp4, fully patched)
doesn't
send emails anymore.

The environment:
- Windows 2000 / iis 5.0 server
- fully patched (windows update)
- log comes from the iis smtp service
- messages are created from a web application, installed locally. no
other access
to the email server is possible (behind a firewall, all ports closed
execpt 80 for web
access)


This is what I get when displaying the log:

62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 31, 0, 23, 0, 0, -, -, 220+mail.3wire.ch+ESMTP,
62.64.121.20, OutboundConnectionCommand, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 31, 0, 4, 0, 0, EHLO, -, myblog.ch,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 125, 0, 6, 0, 0, -, -, 250+ok,
62.64.121.20, OutboundConnectionCommand, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 125, 0, 4, 0, 0, RCPT, -, TO:<myemail@myblog.ch>,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 125, 0, 6, 0, 0, -, -, 250+ok,
62.64.121.20, OutboundConnectionCommand, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 125, 0, 4, 0, 0, DATA, -, -,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 94, 0, 6, 0, 0, -, -, 250+ok,
62.64.121.20, OutboundConnectionCommand, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 94, 0, 4, 0, 0, RCPT, -, TO:<bloguser@userdomain.com>,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 78, 0, 17, 0, 0, -, -, 250-mail.3wire.ch,
62.64.121.20, OutboundConnectionCommand, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 78, 0, 4, 0, 0, MAIL, -, FROM:<myemail@myblog.ch>,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 141, 0, 6, 0, 0, -, -, 250+ok,
62.64.121.20, OutboundConnectionCommand, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 141, 0, 4, 0, 0, DATA, -, -,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 156, 0, 12, 0, 0, -, -, 354+go+ahead,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 125, 0, 6, 0, 0, -, -, 250+ok,
62.64.121.20, OutboundConnectionCommand, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 125, 0, 4, 0, 0, DATA, -, -,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 93, 0, 6, 0, 0, -, -, 250+ok,
62.64.121.20, OutboundConnectionCommand, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 93, 0, 4, 0, 0, RCPT, -, TO:<bloguser@userdomain.com>,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 156, 0, 12, 0, 0, -, -, 354+go+ahead,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 188, 0, 12, 0, 0, -, -, 354+go+ahead,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 171, 0, 6, 0, 0, -, -, 250+ok,
62.64.121.20, OutboundConnectionCommand, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 171, 0, 4, 0, 0, DATA, -, -,
62.64.121.20, OutboundConnectionResponse, 9/23/2006, 17:50:33, SMTPSVC1,
SONIA, -, 265, 0, 12, 0, 0, -, -, 354+go+ahead,
 NUL|NUL|NUL|NUL|NUL|NUL|NUL|NUL|NUL|NUL|
NUL|NUL|NUL|NUL|NUL|NUL|NUL|NUL|NUL|
NUL|NUL|NUL|NUL|NUL|NUL|NUL|....

the latest line shows 4'000 NUL chars.


two questions:

1) can someone tell me what's happening ?
2) all the mailroot folders are empty. many messages were sent but the smtp
service doesn't accept them anymore.
I guess the ASAP measure is to find where this message is and remove it ?
How ? It's not in any of the mailroot
folders :/

Any help will be really appreciated

antonio

[ Post a follow-up to this message ]