SPAM filter malfunction after upgrade Messaging Gateway Appliance to 10.6.4

[ROBERTA DE TITTA]

Dear All,

Until last weekend I had a Brightmail v.10.5.2 installation that worked pretty well, but from sunday it suddendly started to give the error described in this article.
https://support.symantec.com/en_US/article.TECH235663.html

Ok, I thinked that it was time to upgrade to a newer release so I upgrade first to 10.5.3 then to 10.5.4 and at the end to 10.6.4
I had a lot of problem with the last online upgrade because many packets were not available on the mirrors so I upgraded with the iso and everything went well, also virus definition that are correctly updated.

My problem is that many spam emails, especially in italian language are not filtered, and looking at the "message audit logs" one email that today isn't filtered, it was correctly detected as a spam until friday.

My first impression is that during upgrade I've missed definition from some kind of antispam database or similar, the only error that I have in the conduit log is "Network error occurred, Unknown SSL protocol error in connection to aztec.brightmail.com:443 (35), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant" but if I check the connection from the command line telnet it can connect.

What could went wrong?

 

Thanks in advance

[adam_g]

There is a chance that it could be related to this, the impacts are far reaching per support:

https://support.symantec.com/en_US/article.ALERT2629.html

 

[ROBERTA DE TITTA]

Oh good! After 4 years I updated the only weekend that I should never have choose, Murphy's law is always around the corner!

I'll wait for updates, at the moment I'm getting a huge number of errors like:

Spamhunter module: Failure applying body regex rules.
DNS TXT query for "38a1bc569de99e79cde36c6bd7a82214.smg.ultra.brightmail.com" failed unexpectedly.
DNS TXT query for "40.0.240.54.zodiac.brightmail.com" failed unexpectedly.
ecc...
ecc...
 

Many Thanks to Adam and the support

[adam_g]

On the bright side, your upgrade is probably OK! Our log (and everyone elses I presume) is also full of Spamhunter errors and other various errors. Last update I have on my ticket is they are still working on resolution. So far our mail delivery hasn't been noticeably affected.

We actually upgraded one of ours on Sunday, possibly before it started, timing was close but result was the same either way. The issues are also preventing successful downloads of the lastest software versions as well, we found that out yesterday which led us to this global issue per support.

That crew at Symantec is going to have a looong week.... :(

[alexander smg]

My mail daemon for smg stopped.processing Email.   So I had to disable some spam features.   As of last night things are perfect.  

[alexander smg]

Thx