Hi Alexander, Am Sonntag, den 11.04.2010, 15:58 +0200 schrieb Alexander Dalloz: > Am 11.04.2010 15:06, schrieb Marcus: > > Hi, > > > > since yesterday I get a "timeout before data read, where=body" with a > > single mail sent via googlemail. It's not spam/not a virus and from the > > subject line and the message size of 25049183 it seems to have an > > attachment (may be a PDF). Clamav scans up to a size of 10MB. The > > message size itself seems not to be the problem. I've seen bigger mails > > in the log. > > > Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: Milter > > (mimedefang): timeout before data read, where=body > > Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: Milter > > (mimedefang): to error state > > Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: Milter: data, > > reject=451 4.3.2 Please try again later > > Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: > > to=<[email protected]>, delay=00:01:08, pri=25079183, stat=Please try again > > later > > Apr 11 13:01:48 server mimedefang.pl[24748]: > > MDLOG,o3BB0W83029661,mail_in,,,<[email protected]>,<[email protected]>,Fwd: xxx > > Apr 11 13:01:48 server mimedefang[7286]: o3BB0W83029661: smfi_addrcpt > > returned MI_FAILURE > > Apr 11 13:01:48 server mimedefang[7286]: o3BB0W83029661: smfi_addheader > > returned MI_FAILURE > > > Thanks for helping, > > Marcus > > Hi Marcus, > > looks like you have a timeout value of 60 seconds set in your > sendmail.mc for the INPUT_MAIL_FILTER mimedefang (maybe something like > "T=S:1m"), which is too short for processing such large mails.
Ups, yes I do have. I've searched all config files, but forgot these flags. Too much wine last night ;) -------- define(`MILTER',1) INPUT_MAIL_FILTER(`greylist',`S=local:/var/run/milter-greylist/milter-greylist.sock, F=, T=S:1m;R:1m')dnl INPUT_MAIL_FILTER(`mimedefang',`S=unix:/var/spool/MIMEDefang/mimedefang.sock, F=T, T=S:1m;R:1m;E:5m')dnl -------- May be the timeout of 1 minute for sending information from the MTA to mimedefang (S:1m) and for reading reply (R:1m) is to short. I set them to 5 minutes: INPUT_MAIL_FILTER(`mimedefang',`S=unix:/var/spool/MIMEDefang/mimedefang.sock, F=T, T=S:5m;R:5m;E:10m')dnl Could someone post his values or tell me if these values are reasonable. Thanks, Marcus _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

