Wednesday, November 28, 2012

Sonicwall appliance not filtering spam

The Sonicwall Email Security spam filtering appliance is a great product. I've thoroughly enjoyed having one. However, with the 7.4.1 firmware they introduced a MySQL backend which holds thumbprints (spam signatures) and report information. Under certain circumstances (like powering off the appliance during a thumbprint update) can corrupt the database. With a corrupt database the appliance will continue to filter spam, but at a reduced efficiency (we saw it drop from about 95% to about 70%). The reports will also not work or work intermittently.

If you log into your appliance and you see the Good/Junk and Spam Breakdown charts reading zero, suspect a corrupt database. You can check it by going to System > Advanced and clicking the Check Connectivity button. You can also check your thumbprints by logging into the appliance and then going to http://<appliance>/diag.html and selecting Thumbprint info.

A corrupt database is not an end user fixable problem. Contact Sonicwall to have them repair. If your appliance is behind a firewall, then you'll need to temporarily open port 22 to give them access to the appliance.


UPDATE: If your database keeps getting corrupted you're probably looking at hardware failure, at which point you should contact Sonicwall support to have a new unit shipped to you.

No comments:

Post a Comment