On Fri, 29 Nov 2019 16:19:23 -0700 (MST) Tom H wrote: > Hey everyone, > > I have a few questions about something I'm encountering with spamd. > > I've noticed cases where a bounce message to the server results in > spamd 'exceeded time limit'. It reaches the limit of 300+ seconds. In > this particular case, the message size is 564kB and contains an > attachment. Normally, such a message size would not cause spamd to > 'hang' for 5 minutes. > ... > I noticed that the bounce message had rules taking 4+ seconds > (upstream rules such as __FILL_THIS_FORM_SHORT2 and > __FILL_THIS_FORM_LONG2)
These are "body" rules. The chances are that the bounce has invalid MIME and so can't be parsed correctly.