Symantec Mail Security - server crash problem

Hello,

Server 6.5.4 on Windows Server 2003 SP1, in production for over 1 year. Suddenly yesterday crashes twice, and today again.

In NSD file I can find:

############################################################

PASS 2 : FATAL THREAD with STACK FRAMES 5/12 [ nnpas:0b14:0f7c]

FP=1bb5fe28, PC=7c815e02, SP=1bb5fdd4, stksize=84

Exception code: c000013a ({Zakończono aplikację przez naciśnięcie klawiszy CTRL+C}

Aplikacja została zakończona w wyniku naciśnięcia klawiszy CTRL+C.)

############################################################

[ above string in Polish means something like:

“Application was closed becasue of using Ctrl-C shortcut” ]

Yes, there is Symantec Mail Security for Domino version 5.1.0.25 (autoupdated 10/25/06)

Thread causing problem is nnpas.exe from Symantec product.

What’s curious, after NSD launch and create nsd log file, Domino continue to run, and freeze about half hour later.

Info in log: “Application was closed becasue of using Ctrl-C shortcut” is very strange, nnpas.exe doesn’t interface with desktop, and of course nobody was pressing Ctrl-C on server machine.

There wasn’t any recent changes to system or domino configuration.

Times of crash are not very significant, although both yesterday and today they happend early in the morning and around noun.

Anybody had similar problem with this product?

Subject: Symantec Mail Security - server crash problem

witam Panie Slawku,

This is Symantec tech not translated from Japanese so might not be as accrued as it should be but will give an idea what is happening, hope this help

SMS Domino 5.1.2 release note

Circumstance

In this document, it has explained Symantec Mail Security for Domino (SMS Domino) in regard to the modification point which was done with 5.1.2.

Solution/details

SMS Domino 5.1.2 build 28

Contents of problem: NNPAS.exe Domino Server repeatedly crashes with cause.

Contents of correction: In order not to cause the crash of Domino Server, it was corrected.

Contents of problem: When Symantec Premium Antispam function is made effective, there are times when functioning it does as an open relay server. It receives this phenomenon, and E-mail address of the believer < " with “> with occurs only when it is surrounded.

Contents of correction: In order not to relay corresponding E-mail, it was corrected.

Contents of problem: Vulnerability of buffer overflow exists in [dekonpoza] of RAR.

Contents of correction: It was renewed to the version where [dekonpoza] corrected this problem.

Rafal

Subject: RE: Symantec Mail Security - server crash problem

Dzięki, szukałem na Symantecu bez skutku:)

Thank you,

will try an update.

I was wrong, Symantec Mail Security was not updated in October. So there are big chances, that update will help.

I’ll post results here next week.

Subject: 3 days now without crash, so it looks SMS update helped