Re: Which milter t/o generates 'timeout before data read' error? was: Re: [Mimedefang] milter timing out.

2004-03-01 Thread Andrew J Caird
Quoting Jon R. Kibler [EMAIL PROTECTED]:

 Jon R. Kibler wrote:
  
  
   Jan 31 20:51:03 norm sm-mta[27815]: i112jv3O027815: Milter (mimedefang):
   timeout before data read
   Jan 31 20:51:03 norm sm-mta[27815]: i112jv3O027815: Milter (mimedefang):
   to error state
 
 I asked this question earlier, but I think it got lost in other parts of the
 discussion and never got answered: Regarding the above error messages...
 which milter timeout value (C,S,R, or E) effects the 'timeout before data
 read' error? That is, which ones should be increased to eliminate this
 error?

Jon,
  I don't recall seeing an answer to this posted, so here goes a try.
The timeout before data read appears to be controlled by the R setting; in
sendmail/milter.c that error appears in the function milter_read().  The fourth
argument to that function is to (timeout).  Everywhere that milter_read is
called in milter.c the fourth argument is m-mf_timeout[SMFTO_READ] which is
parsed from the R option (line 1360 of milter.c, sendmail 8.12.10).
  However, remember that you might also be bumping into the E setting, which
is the overall timeout.
  Hopefully you have already solved your problem, but just in case you were
still waiting, I hope this helps.
  I've had good luck with the settings below for another email scanner (Sopho's
PureMessage) - even messages that are too large for email (IMO) make it
through.
  Cheers.
--
Andrew


  C:5m  == timeout for connecting to filter is 5 minutes
  E:8m  == overall timeout from start to finish is 8 minutes
  R:4m  == timeout for reading reply from filter is 4 minutes
  S:2m  == Timeout for sending data from MTA to filter is 2 minutes

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Which milter t/o generates 'timeout before data read' error? was: Re: [Mimedefang] milter timing out.

2004-02-06 Thread Jon R. Kibler
Jon R. Kibler wrote:
 
 
  Jan 31 20:51:03 norm sm-mta[27815]: i112jv3O027815: Milter (mimedefang):
  timeout before data read
  Jan 31 20:51:03 norm sm-mta[27815]: i112jv3O027815: Milter (mimedefang):
  to error state
 

I asked this question earlier, but I think it got lost in other parts of the 
discussion and never got answered: Regarding the above error messages... which milter 
timeout value (C,S,R, or E) effects the 'timeout before data read' error? That is, 
which ones should be increased to eliminate this error?

--
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] milter timing out.

2004-02-05 Thread Justin
On Thu, 5 Feb 2004, Lucas Albers wrote:

 
 Justin said:
  On Wed, 4 Feb 2004, Edmund wrote:
 
  I'm having the same problem here.  A co-worker was trying to
  send a big file to another co-worker and the mail server kept
  on throwing a Error 451.   Unfortunately, I don't know how big
  the file is.
 
  then returns a 451.  I'm going to inquire with the list about this under
  separate cover tomorrow, after I test a few more things.  I've had to
  disable MD in the mean time.  It's very odd.
 I run sendmail on a 7.3 box, mimedefang 2.33, sendmail 8.12.8, and it has
 never had timeout issues from large file size. I handle 15 meg files
 routinelly.
 I turned off spam checking for authenticated and internally sent mail, as
 some clients were suffering timeouts.
 you can just swatch your log, and only restart mimedefang/sendmail when it
 is suffering a timeout. My guess is something in your filter is taking a
 long time to process the email.

Thanks for the reply.  These messages weren't of any abnormal length.  In 
fact the majority of them weren't as long as this message is.  MD did 
regularly temp fail mail to my usenet alias.  The only mail I ever 
received there was infected mail.  It temp failed just about anything 
though regardless of size.  I still have that box and the installation 
intact.  It doesn't however handle mail anymore and it wouldn't be easy to 
set it up to handle mail at the present time either.  Perhaps after I move 
I can revive that machine and try to figure out what went wrong.  My 
current server is what I'm focusing on at the moment though.

Thanks
 Justin

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] milter timing out.

2004-02-04 Thread Jon R. Kibler
Jon R. Kibler wrote:

 Up your sendmail logging option (10 will log inbound, 12 will log both inbound and 
 outbound) and you will get a log entry for every connection that occurs. Look at how 
 many connections you have in a given period of time, and that will give you your 
 rate. You don't want to run with a high logging option value for a long period of 
 time, or your log will grow huge and VERY fast!

Oh yeah, I left out an important detail... be sure you have syslog.conf configured to 
be able to log at the info or debug levels. Logging at levels 10 and 12 log as 
'mail.info'.

--
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] milter timing out.

2004-02-04 Thread Justin
On Wed, 4 Feb 2004, Edmund wrote:

 I'm having the same problem here.  A co-worker was trying to
 send a big file to another co-worker and the mail server kept
 on throwing a Error 451.   Unfortunately, I don't know how big
 the file is.
 
 I read on this thread that by resetting MD it should return to normal.
 I did that, and it seems to have worked.  But I'm certain that it'd do
 that again sooner or later.

The problem I used to have on my RH 7.3 box was fixed in the same way.  I 
had a cronjob restart sendmail and MD every 5 minutes just to keep things 
mostly working.  I never did find the cause of that problem.  My current 
problem is with MD going completely brain dead after receiving a message.  
I mean it accepts the message (and any new messages) for processing but it 
will do nothing.  It simply waits for sendmail to time it out and sendmail 
then returns a 451.  I'm going to inquire with the list about this under 
separate cover tomorrow, after I test a few more things.  I've had to 
disable MD in the mean time.  It's very odd.

Justin

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] milter timing out.

2004-02-03 Thread -ray
On Mon, 2 Feb 2004, Jon R. Kibler wrote:

  a) Set the ConnectionRateThrottle option to a low value (4) so that
 sendmail will not accept more than 4 connections per second. Connections
 are not refused, sendmail just delays responding to them. (With MyDoom,
 we have seen connection rate bursts  100 new connections/sec/MTA.)

Dumb question, but how are you determining your ConnectionRate?  I'm 
hesitant to throttle it before i know what a good number for our system 
is.  thanks.

ray
-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Ray DeJean   http://www.r-a-y.org
Systems EngineerSoutheastern Louisiana University
IBM Certified Specialist  AIX Administration, AIX Support
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] milter timing out.

2004-02-03 Thread Lucas Albers

-ray said:
 Dumb question, but how are you determining your ConnectionRate?  I'm
 hesitant to throttle it before i know what a good number for our system
 is.  thanks.

Depends on your mail load. Pick the same connection throttle as someone
who gets the same message volume.
For DOS support just set it to 10, imo.
Assuming you don't have really high load.

Luke Computer Science System Administrator

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] milter timing out.

2004-02-03 Thread -ray

Did more troubleshooting today.  I think this is a multiplexor problem.  I 
started logging the # of sendmail and MD processes.  At some point it 
appears the multiplexor decides to stop spawning new slaves, and sendmail 
processes start backing up.  Log created with:

echo `date`: Sendmail `ps aux | grep sendmail: -c` | mimedefang `ps -efl | grep fang 
| grep pid -c`  /log2/proclog
sleep 5

Tue Feb  3 17:21:09 CST 2004: Sendmail 45 | mimedefang 24
Tue Feb  3 17:21:14 CST 2004: Sendmail 43 | mimedefang 26
Tue Feb  3 17:21:20 CST 2004: Sendmail 49 | mimedefang 31
Tue Feb  3 17:21:25 CST 2004: Sendmail 49 | mimedefang 31
Tue Feb  3 17:21:30 CST 2004: Sendmail 46 | mimedefang 28
Tue Feb  3 17:21:35 CST 2004: Sendmail 54 | mimedefang 36
Tue Feb  3 17:21:41 CST 2004: Sendmail 53 | mimedefang 36
Tue Feb  3 17:21:46 CST 2004: Sendmail 45 | mimedefang 27
Tue Feb  3 17:21:51 CST 2004: Sendmail 43 | mimedefang 1
Tue Feb  3 17:21:56 CST 2004: Sendmail 44 | mimedefang 1
Tue Feb  3 17:22:01 CST 2004: Sendmail 44 | mimedefang 1
Tue Feb  3 17:22:07 CST 2004: Sendmail 45 | mimedefang 1
Tue Feb  3 17:22:12 CST 2004: Sendmail 49 | mimedefang 1
Tue Feb  3 17:22:17 CST 2004: Sendmail 51 | mimedefang 1
Tue Feb  3 17:22:22 CST 2004: Sendmail 57 | mimedefang 1
Tue Feb  3 17:22:27 CST 2004: Sendmail 62 | mimedefang 1
Tue Feb  3 17:22:33 CST 2004: Sendmail 68 | mimedefang 1
Tue Feb  3 17:22:38 CST 2004: Sendmail 74 | mimedefang 1
Tue Feb  3 17:22:43 CST 2004: Sendmail 78 | mimedefang 1
Tue Feb  3 17:22:48 CST 2004: Sendmail 88 | mimedefang 1
Tue Feb  3 17:22:53 CST 2004: Sendmail 97 | mimedefang 1
Tue Feb  3 17:22:59 CST 2004: Sendmail 102 | mimedefang 1
Tue Feb  3 17:23:04 CST 2004: Sendmail 111 | mimedefang 1
Tue Feb  3 17:23:09 CST 2004: Sendmail 115 | mimedefang 1
Tue Feb  3 17:23:14 CST 2004: Sendmail 120 | mimedefang 1
Tue Feb  3 17:23:19 CST 2004: Sendmail 131 | mimedefang 1
Tue Feb  3 17:23:32 CST 2004: Sendmail 145 | mimedefang 1
Tue Feb  3 17:23:45 CST 2004: Sendmail 172 | mimedefang 1
Tue Feb  3 17:23:55 CST 2004: Sendmail 184 | mimedefang 1
Tue Feb  3 17:24:00 CST 2004: Sendmail 191 | mimedefang 1
Tue Feb  3 17:24:06 CST 2004: Sendmail 197 | mimedefang 1
Tue Feb  3 17:24:11 CST 2004: Sendmail 204 | mimedefang 1
Tue Feb  3 17:24:16 CST 2004: Sendmail 209 | mimedefang 1
Tue Feb  3 17:24:21 CST 2004: Sendmail 213 | mimedefang 1
Tue Feb  3 17:24:27 CST 2004: Sendmail 220 | mimedefang 1
Tue Feb  3 17:24:32 CST 2004: Sendmail 225 | mimedefang 1
Tue Feb  3 17:24:37 CST 2004: Sendmail 228 | mimedefang 1
Tue Feb  3 17:24:42 CST 2004: Sendmail 237 | mimedefang 1
Tue Feb  3 17:24:48 CST 2004: Sendmail 239 | mimedefang 1
Tue Feb  3 17:24:53 CST 2004: Sendmail 243 | mimedefang 1
Tue Feb  3 17:24:58 CST 2004: Sendmail 253 | mimedefang 1
Tue Feb  3 17:25:04 CST 2004: Sendmail 261 | mimedefang 1
Tue Feb  3 17:25:09 CST 2004: Sendmail 264 | mimedefang 1
Tue Feb  3 17:25:14 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:25:20 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:25:25 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:25:30 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:25:35 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:25:41 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:25:46 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:25:57 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:26:03 CST 2004: Sendmail 265 | mimedefang 1
Tue Feb  3 17:26:09 CST 2004: Sendmail 265 | mimedefang 1
Tue Feb  3 17:26:14 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:26:19 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:26:29 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:26:44 CST 2004: Sendmail 264 | mimedefang 1
Tue Feb  3 17:26:58 CST 2004: Sendmail 260 | mimedefang 1
Tue Feb  3 17:27:03 CST 2004: Sendmail 264 | mimedefang 1
Tue Feb  3 17:27:19 CST 2004: Sendmail 257 | mimedefang 1
Tue Feb  3 17:27:26 CST 2004: Sendmail 261 | mimedefang 1
Tue Feb  3 17:27:42 CST 2004: Sendmail 250 | mimedefang 1
Tue Feb  3 17:27:50 CST 2004: Sendmail 251 | mimedefang 1
Tue Feb  3 17:28:02 CST 2004: Sendmail 256 | mimedefang 1
Tue Feb  3 17:28:14 CST 2004: Sendmail 261 | mimedefang 1
Tue Feb  3 17:28:29 CST 2004: Sendmail 247 | mimedefang 1
Tue Feb  3 17:28:35 CST 2004: Sendmail 248 | mimedefang 1
Tue Feb  3 17:28:45 CST 2004: Sendmail 246 | mimedefang 1
Tue Feb  3 17:28:55 CST 2004: Sendmail 244 | mimedefang 1
Tue Feb  3 17:29:00 CST 2004: Sendmail 255 | mimedefang 1
Tue Feb  3 17:29:15 CST 2004: Sendmail 262 | mimedefang 1
Tue Feb  3 17:29:31 CST 2004: Sendmail 265 | mimedefang 1
Tue Feb  3 17:29:49 CST 2004: Sendmail 253 | mimedefang 1
Tue Feb  3 17:30:06 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:30:11 CST 2004: Sendmail 261 | mimedefang 1
Tue Feb  3 17:30:17 CST 2004: Sendmail 261 | mimedefang 1
Tue Feb  3 17:30:22 CST 2004: Sendmail 261 | mimedefang 1
Tue Feb  3 17:30:27 CST 2004: Sendmail 266 | mimedefang 1
Tue Feb  3 17:30:33 CST 2004: Sendmail 51 | mimedefang 0
Tue Feb  3 17:30:38 CST 2004: 

Re: [Mimedefang] milter timing out.

2004-02-03 Thread David F. Skoll
On Tue, 3 Feb 2004, -ray wrote:

 appears the multiplexor decides to stop spawning new slaves, and sendmail
 processes start backing up.

When that happens, what does:

md-mx-ctrl status

say?

Regards,

David.
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] milter timing out.

2004-02-02 Thread -ray

Having a weird milter timeout on my server as well.  Mail flows fine then 
for no apparent reason, the milters start timing out.  Sendmail reaches 
MaxDaemon (currently 250) and starts rejecting connections.  Even after 
that, mimedefang never seems to recover.  Restarting sendmail and 
mimedefang fixes it.  This has been happening once every day or two.

Right now i'm looking for ideas on where to troubleshoot next.  I tried 
upping MaxDaemon to 500 and 1000 but the problem still occurs.  I've 
increased milter timeouts to F=T, T=S:5m;R:5m;E:10m.   Trying to determine 
if this is a sendmail or a MD (or spamassassing or clamav) problem.

Is sendmail reaching MaxDaemon because the milters start backing up, or
vice versa?  I tried turning on mimedefang debugging, but the load was too
great and the system couldn't keep up.  Any other ideas?

ray



Jan 31 20:51:03 norm sm-mta[27815]: i112jv3O027815: Milter (mimedefang): 
timeout before data read
Jan 31 20:51:03 norm sm-mta[27815]: i112jv3O027815: Milter (mimedefang): 
to error state
Jan 31 20:51:03 norm sm-mta[27815]: i112jv3O027815: Milter: data, 
reject=451 4.7.1 Please try again later
Jan 31 20:51:03 norm sm-mta[27815]: i112jv3O027815: [EMAIL PROTECTED], 
delay=00:05:04, pri=30313, stat=Please try again later
Jan 31 20:51:04 norm sm-mta[28251]: i112k43N028251: Milter (mimedefang): 
timeout before data read
Jan 31 20:51:04 norm sm-mta[28251]: i112k43N028251: Milter (mimedefang): 
to error state
Jan 31 20:51:04 norm sm-mta[28251]: i112k43N028251: Milter (mimedefang): 
init failed to open
Jan 31 20:51:04 norm sm-mta[28251]: i112k43N028251: Milter (mimedefang): 
to error state
Jan 31 20:51:04 norm sm-mta[28251]: i112k43N028251: Milter: initialization 
failed, temp failing commands
Jan 31 20:51:04 norm sm-mta[28251]: i112k43N028251: 
12-215-185-211.client.mchsi.com [12.215.185.211] did not issue 
MAIL/EXPN/VRFY/ETRN during connection to MTA
Jan 31 20:51:05 norm sm-mta[3100]: rejecting connections on daemon MTA: 
250 children, max 250
Jan 31 20:51:05 norm sendmail[12687]: i0VBUTU7019879: 
to=[EMAIL PROTECTED], delay=15:20:36, xdelay=00:00:22, 
mailer=esmtp, pri=3725131, relay=mail.polarwax.com. [211.167.73.20], 
dsn=4.0.0, stat=Deferred: Connection refused by mail.polarwax.com.
Jan 31 20:51:05 norm sm-mta[28253]: i112k53N028253: Milter (mimedefang): 
timeout before data read
Jan 31 20:51:05 norm sm-mta[28253]: i112k53N028253: Milter (mimedefang): 
to error state
Jan 31 20:51:05 norm sm-mta[28253]: i112k53N028253: Milter (mimedefang): 
init failed to open
Jan 31 20:51:05 norm sm-mta[28253]: i112k53N028253: Milter (mimedefang): 
to error state
Jan 31 20:51:05 norm sm-mta[28253]: i112k53N028253: Milter: initialization 
failed, temp failing commands
Jan 31 20:51:05 norm sm-mta[28253]: i112k53N028253: mta13.classmates.com 
[65.243.133.33] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
Jan 31 20:51:06 norm sm-mta[28254]: i112k63N028254: Milter (mimedefang): 
timeout before data read
Jan 31 20:51:06 norm sm-mta[28254]: i112k63N028254: Milter (mimedefang): 
to error state
Jan 31 20:51:06 norm sm-mta[28254]: i112k63N028254: Milter (mimedefang): 
init failed to open
Jan 31 20:51:06 norm sm-mta[28254]: i112k63N028254: Milter (mimedefang): 
to error state
Jan 31 20:51:06 norm sm-mta[28254]: i112k63N028254: Milter: initialization 
failed, temp failing commands
Jan 31 20:51:06 norm sm-mta[28254]: i112k63N028254: 08.opn08.com 
[69.6.27.127] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA





___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang