Particular emails forcing SA timeouts

[Martin Hepworth]

<x-flowed>
Or reduce the number of RBL's in use...

I just use the spamcop-XBL and sorbs ones. More than that I found I was
getting lots of SA-timeouts even on stupidly large timeout settings.

I guess you could always rsync/whatever the files locally and have local
zone files for the RBL's youself...


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Michael R. Dilworth (E-mail) wrote:
>         I've seen this too, the domains have screwy dns. Just
>         increase the time out value.
>
>         Save the message and run it trough sa with debug and
>         you will see what I mean.  In my case it took 50 seconds
>         to complete the dns lookups.
>
>
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Steve Campbell
> Sent: Thursday, September 02, 2004 8:09 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Particular emails forcing SA timeouts
>
>
> ----- Original Message -----
> From: "Martin Hepworth" <martinh at SOLID-STATE-LOGIC.COM>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Thursday, September 02, 2004 9:39 AM
> Subject: Re: Particular emails forcing SA timeouts
>
>
>
>>Steve
>>
>>what's you SA config like - lots of RBL's???? what 'extra' rules are you
>>running for SA?
>>--
>>Martin Hepworth
>>Senior Systems Administrator
>>Solid State Logic Ltd
>>tel: +44 (0)1865 842300
>>
>>
>
> Mr. Hepworth,
>
> I have a good bit of stuff in my SA config file. My blacklist is fairly
> long.
>
> But I'm not seeing timeouts in general. It consistantly happens on these
> emails. They are all similar in content and I'm fairly certain they are from
> the same place (just using spoofed IPs and domain names).
>
> I fear that someone has figured a way to bypass SA through MS.
>
> Thanks.
>
> Steve Campbell
> campbell at cnpapers.com
> Charleston Newspapers
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>