Orphaned HDR files in SUBSPOOL folders

Problem reported by Scot Desort - 9/20/2024 at 8:29 AM

Submitted

Over the past 5 weeks, it appears that orphaned .HDR files are building up in the SUBSPOOL folders. I am not sure why. There are no .EML files in any of the folders. I have files going back to August 14, a few each day, in each of the 10 subspool folders. Very strange.

There are now over 1000, which is triggering a notification to me every 30 min about the spool size. Of course, nothing is visible in the web interface.

We are on version 100.0.9014.28563

5 Replies

Reply to Thread

Employee Replied

9/20/2024 at 9:03 AM

Employee Post

Hello Scot,

We had a similar bug in 8993, can you confirm if any of these orphaned HDRs are from a more recent build?

Build 8993 (Aug 15, 2024)

Fixed: Emails that fail DMARC and are rejected are leaving orphaned HDR files in the spool folders.

Best regards,

Scot Desort Replied

9/20/2024 at 10:10 AM

I have orphaned HDR files being created even today, and we are on 9014

Employee Replied

9/20/2024 at 10:42 AM

Employee Post

Scot,

Thanks for letting me know, I don't see a ticket started for this topic, so would you mind if I start one for you?

Best,

Scot Desort Replied

9/20/2024 at 11:40 AM

Sure. Here is screenshot of subspool9 folder showing HDR files as recent as 3 hours ago.

and these do appear to be from failed DMARC messages:

Failed

quickbooks@notification.intuit.com

x@x.com

retry: 0;09/20/2024 11:28:08

from: quickbooks@notification.intuit.com

spamcheck: _SPF=30,Fail

spamcheck: _DMARC=0,failed

creationdate: 09/20/2024 11:28:08

notify:x@x.com

containsLocalDeliveries: True

connectedip: 188.80.243.4

helo: bl15-243-4.dsl.telepac.pt

connectedhostname: bl15-243-4.dsl.telepac.pt

smtpSessionId: 20019517

dmarcResult: Failed (Domain: notification.intuit.com, Reason: SPF: False, DKIM: False, Alignments: 0, Domain: notification.intuit.com, Action: reject)

authentication-results: dmarc=failed (v=DMARC1 p=reject rua=mailto:dmarc_rua@emaildefense.proofpoint.com ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com fo=1) reason="SPF: False, DKIM: False, Alignments: 0, Domain: notification.intuit.com"

Employee Replied

9/20/2024 at 12:58 PM

Employee Post

Scot,

Got it, thank you for the information. I'm creating a ticket right now so we can start troubleshooting.

Best,

Back to Community Threads

Please leave this box unchecked

Reply to Thread

Enter the verification text