Particular emails forcing SA timeouts

[Martin Hepworth]

<x-flowed>
Steve

what's you SA config like - lots of RBL's???? what 'extra' rules are you
running for SA?
--
Martin Hepworth
Senior Systems Administrator
Solid State Logic Ltd
tel: +44 (0)1865 842300


Steve Campbell wrote:

> I have recently starting seeing a lot of graphical porn coming through due
> to what appears to be SA timeouts. I can only assume something in these
> emails are forcing the timeouts. They all seem to have similar headers as
> below: This seems to be the only email that is getting the timeouts.
>
>
> MIME-Version: 1.0
> Content-Type: text/html
> Content-Transfer-Encoding: base64
> X-CN-MailServer2-MailScanner-Information: Please contact the ISP for more
> information
> X-CN-MailServer2-MailScanner: Found to be clean
> X-CN-MailServer2-MailScanner-SpamCheck: not spam, SpamAssassin (timed out)
> X-MailScanner-From: dwyerju at sculptyourtiny.com
> Status:
>
> They seem to be incomplete as this is the way this ends.
>
> The logs for this message indicate:
>
> Sep  2 07:47:12 mailserver2 MailScanner[12305]: Content Checks: Detected and
> will
> disarm HTML message in i82BjnJn027100
>
> I am running MS version 4.31.6-1 and SA 2.63-1
>
> Is anyone else seeing this and does anyone have a clue?
>
> Thanks
>
> Steve Campbell
> campbell at cnpapers.com
> Charleston Newspapers
>



**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>