logs – Everything MDaemon

MDaemon generates a number of entries in the Windows eventlogs to assist administrators in monitoring for specific important events. Below is a list of the various eventlog codes that MDaemon uses at this time:

500	** ALERT ** ODBC DSN %s for list %s could not be opened; message to list was not sent to ODBC members [EvODBC]
501	** ALERT ** RFC 2822 states that you MUST define a %s alias [EvRFC]
502	** ALERT ** Network subsystem failure, WINSOCK.DLL not loaded [EvNetwork]
503	** ALERT ** %s %s:%d could not be initialized [EvNetwork]
504	** ALERT ** DNS server IP address is blank; please provide a DNS server IP [EvDNS]
505	** ALERT ** MDaemon’s database connection failed so MDaemon was forced to refuse a mail session [EvDatabase]
506	** ALERT ** %s tried to send a message as %s without proper authentication [EvSecurity]
507	** ALERT ** MDaemon could not start because NTUtil.dll could not be loaded, err:%d [EvDLL]
508	** ALERT ** LDaemon LDAP server could not be started [EvProcess]
509	** ALERT ** MDaemon could not start because CFilter.dll could not be loaded [EvDLL]
510	** ALERT ** MDaemon could not start because MDUser.dll, MDUserODBC.dll, or MDUserLDAP.dll could not be loaded [EvDLL]
511	** ALERT ** MDaemon could not start because MDCalendar.dll could not be loaded [EvDLL]
512	** ALERT ** MDaemon could not start because MDList.dll could not be loaded [EvDLL]
513	** ALERT ** Failed to start process %s (FailPoint: %d, Error: %d/%d) [EvProcess]
514	** ALERT ** Failed to start process CFENGINE.EXE; mail can be queued but not delivered (FailPoint: %d, Error: %d/%d) [EvProcess]
515	** ALERT ** Failed to start process %s as user ‘%s’ on ‘%s’; started as default user instead; (FailPoint: %d, Error: %d/%d) [EvProcess]
521	** ALERT ** %s gave false logon/password to POP server; user: %s [EvSecurity]
522	** ALERT ** The ‘[Special] RefuseNULLReturnPath’ option is set to YES in MDaemon.ini; this is an RFC violation [EvRFC]
523	** ALERT ** RFC does not require that HELO or MAIL identification match to the sending server yet MDaemon is configured to refuse mail in these cases (Reverse Lookup properties) [EvRFC]
524	** ALERT ** $AVLONGPRODUCTNAME$ subscription/trial has expired; contact %s or visit http://www.altn.com for renewal instructions [EvSecurity]
525	** ALERT ** WorldClient was expected to be running but wasn’t; restart attempt was %s [EvProcess]
527	** ALERT ** Spam Filter did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]
528	** ALERT ** MDaemon requires an installed and enabled Network Interface Card; software can not load [EvDLL]
529	** ALERT ** RFC 2142 states that you MUST define an %s alias [EvRFC]
530	** ALERT ** Attempt to logon and impersonate user ‘%s’ on domain %s failed (Thread ID: %d, Error: %d) [EvProcess]
531	** ALERT ** AntiVirus did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]
532	** ALERT ** MDaemon could not load HashCash.dll. HashCash stamps can not be minted [EvDLL]
533	** ALERT ** MDaemon could not start MDSpamD.exe. AntiSpam services will not be possible [EvProcess]

Happy monitoring!

The account pruner logs it’s activities in the accountprune.log file in the \MDaemon\Logs\ directory, including potentially important details like accounts which were deleted due to inactivity.

In addition to MDaemon’s daily stats report, I also like to review the accountprune.log just to ensure that nothing important was deleted.

On my server I created a scheduled task that calls a batch file which says “IF EXIST C:\MDaemon\Logs\accountprune.log COPY c:\MDaemon\accountprune.raw C:\MDaemon\Queues\Rawfiles\accountprune.raw”, where accountprune.raw is a RAW file I build that emails my admin mailbox and uses the attachment feature to attach (and delete) the logfile.

The RAW file is pretty simple, mine looks like this:

TO <[email protected]> FROM <[email protected]> SUBJECT <AccountPrune> X-Flag=ATTACH <D:\MDaemon\Logs\AccountPrune.log, ASCII> -x

The result is that I get to see the report each morning.

Tag Archives: logs

MDaemon’s eventlog codes

Sending Account Pruner log to the administrator