Hi, since yesterday I get a "timeout before data read, where=body" with a single mail sent via googlemail. It's not spam/not a virus and from the subject line and the message size of 25049183 it seems to have an attachment (may be a PDF). Clamav scans up to a size of 10MB. The message size itself seems not to be the problem. I've seen bigger mails in the log.
mimedefang 2.64-6 sendmail 8.14.3-5+lenny1 spamassassin 3.2.5-2+lenny2 clamav-daemon 0.95.3+dfsg-1~volatile1 -------------- Apr 11 13:00:33 server milter-greylist: o3BB0W83029661: Sender IP 209.85.210.197 and address <[email protected]> are SPF-compliant, bypassing greylist Apr 11 13:00:40 server sm-mta[29661]: o3BB0W83029661: from=<[email protected]>, size=25049183, class=0, nrcpts=1, msgid=<[email protected]>, proto=ESMTP, daemon=MTA-v4, relay=mail-yx0-f197.google.com [209.85.210.197] Apr 11 13:00:41 server sm-mta[29661]: o3BB0W83029661: Milter add: header: X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.3.5 (mx.medienlabor.de [217.118.24.21]); Sun, 11 Apr 2010 13:00:41 +0200 (CEST) Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: Milter (mimedefang): timeout before data read, where=body Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: Milter (mimedefang): to error state Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: Milter: data, reject=451 4.3.2 Please try again later Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: to=<[email protected]>, delay=00:01:08, pri=25079183, stat=Please try again later Apr 11 13:01:48 server mimedefang.pl[24748]: MDLOG,o3BB0W83029661,mail_in,,,<[email protected]>,<[email protected]>,Fwd: xxx Apr 11 13:01:48 server mimedefang[7286]: o3BB0W83029661: smfi_addrcpt returned MI_FAILURE Apr 11 13:01:48 server mimedefang[7286]: o3BB0W83029661: smfi_addheader returned MI_FAILURE -------------- grep -i timeout sendmail.cf -------------- sendmail.cf:# open connection cache timeout sendmail.cf:O ConnectionCacheTimeout=5m sendmail.cf:# timeouts (many of these) sendmail.cf:#O Timeout.initial=5m sendmail.cf:#O Timeout.connect=5m sendmail.cf:#O Timeout.aconnect=0s sendmail.cf:O Timeout.iconnect=2m sendmail.cf:#O Timeout.helo=5m sendmail.cf:O Timeout.mail=2m sendmail.cf:#O Timeout.rcpt=1h sendmail.cf:O Timeout.datainit=2m sendmail.cf:#O Timeout.datablock=1h sendmail.cf:#O Timeout.datafinal=1h sendmail.cf:O Timeout.rset=1m sendmail.cf:O Timeout.quit=2m sendmail.cf:#O Timeout.misc=2m sendmail.cf:O Timeout.command=5m sendmail.cf:O Timeout.ident=5s sendmail.cf:#O Timeout.fileopen=60s sendmail.cf:#O Timeout.control=2m sendmail.cf:O Timeout.queuereturn=5d sendmail.cf:#O Timeout.queuereturn.normal=5d sendmail.cf:#O Timeout.queuereturn.urgent=2d sendmail.cf:#O Timeout.queuereturn.non-urgent=7d sendmail.cf:#O Timeout.queuereturn.dsn=5d sendmail.cf:O Timeout.queuewarn=4h sendmail.cf:#O Timeout.queuewarn.normal=4h sendmail.cf:#O Timeout.queuewarn.urgent=1h sendmail.cf:#O Timeout.queuewarn.non-urgent=12h sendmail.cf:#O Timeout.queuewarn.dsn=4h sendmail.cf:#O Timeout.hoststatus=30m sendmail.cf:#O Timeout.resolver.retrans=5s sendmail.cf:#O Timeout.resolver.retrans.first=5s sendmail.cf:#O Timeout.resolver.retrans.normal=5s sendmail.cf:#O Timeout.resolver.retry=4 sendmail.cf:#O Timeout.resolver.retry.first=4 sendmail.cf:#O Timeout.resolver.retry.normal=4 sendmail.cf:#O Timeout.lhlo=2m sendmail.cf:O Timeout.auth=2m sendmail.cf:O Timeout.starttls=2m -------------- clamd.conf -------------- #Automatically Generated by clamav-base postinst #To reconfigure clamd run #dpkg-reconfigure clamav-base #Please read /usr/share/doc/clamav-base/README.Debian.gz for details LocalSocket /var/run/clamav/clamd.ctl FixStaleSocket true # TemporaryDirectory is not set to its default /tmp here to make overriding # the default with environment variables TMPDIR/TMP/TEMP possible User clamav AllowSupplementaryGroups true ScanMail true ScanArchive true ArchiveBlockEncrypted false MaxDirectoryRecursion 15 FollowDirectorySymlinks false FollowFileSymlinks false ReadTimeout 180 MaxThreads 12 MaxConnectionQueueLength 15 StreamMaxLength 10M LogSyslog false LogFacility LOG_LOCAL6 LogClean false LogVerbose false PidFile /var/run/clamav/clamd.pid DatabaseDirectory /var/lib/clamav SelfCheck 3600 Foreground false Debug false ScanPE true ScanOLE2 true ScanHTML true DetectBrokenExecutables false MailFollowURLs false ExitOnOOM false LeaveTemporaryFiles false AlgorithmicDetection true ScanELF true IdleTimeout 30 PhishingSignatures true PhishingScanURLs true PhishingAlwaysBlockSSLMismatch false PhishingAlwaysBlockCloak false DetectPUA false ScanPartialMessages false HeuristicScanPrecedence false StructuredDataDetection false CommandReadTimeout 5 SendBufTimeout 200 MaxQueue 100 LogFile /var/log/clamav/clamav.log LogTime true LogFileUnlock false LogFileMaxSize 0 -------------- -------------- MX_USER=defang MX_RECIPIENT_CHECK=yes MX_LOG=yes MX_EMBED_PERL=yes LOOPBACK_RESERVED_CONNECTIONS=-1 ALLOW_NEW_CONNECTIONS_TO_QUEUE=no MX_MINIMUM=2 MX_MAXIMUM=12 -------------- Thanks for helping, Marcus _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
