<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">Please can you send me the df and qf files of the message (off-list!).<DIV>I will test it against the latest code and see what happens.</DIV><DIV>If you could get them to me today, I may be able to fix the problem before the new version release tomorrow.</DIV><DIV><BR><DIV><DIV>On 30 Mar 2006, at 23:02, Karl Bailey wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"> <DIV class="Section1"><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">Only when I have a problem, which I seem to at the moment. Two day in a row now I have had a problem with MailScanner 4.51.5-1 running in RedHat FC1. It employs spam assassin, kaspersky, f-prot & mcafee virus scanning. CPU usage etc hovers around 25% & all in all it works very well processing around 20000 messages (6GBytes) a day.</SPAN></FONT></P><DIV><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"> </SPAN></FONT><BR class="khtml-block-placeholder"></DIV><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">I have received a single message that brings mailscanner to it’s knees .. the message enters the inbound mail queue, the MailScanner processes defunct one by one till MailScanner is effectively not processing mail any more, mail builds up in the inbound mail queue. This is exasperated by the fact that although MailScanner reports as defunct in the process list it is actually still identifying spam, & generating spam warning messages, which in turn end up in the inbound queue… this seems to lead to a “DOS” effect. </SPAN></FONT></P><DIV><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"> </SPAN></FONT><BR class="khtml-block-placeholder"></DIV><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">I have isolated the single message in it’s raw queue qf & df files. Every time I place it into the inbound queue the processes defunct, & yes I am ensuring there is no file permissions problems… If anyone wants a copy of the message I can send them the queue files…. I’m suspicious though that the Virus Scanning is where the problem lies, hence without the combination of VC’s listed above it may run through the queue … Any ideas? The one thing I’ve noticed about the header (qf file) is that there seems to be some very long boundary strings emplyed.</SPAN></FONT></P><DIV><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"> </SPAN></FONT><BR class="khtml-block-placeholder"></DIV><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">Regards</SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">KArl </SPAN></FONT></P> </DIV><P class="MsoNormal"> <FONT size="1" color="gray" face="Arial"> <SPAN lang="EN-GB" style="font-size:7.5pt;font-family:Arial;color:gray">Registered Office: <ST1:STREET w:st="on"><ST1:ADDRESS w:st="on">5-7 Abbey Court</ST1:ADDRESS></ST1:STREET>, <ST1:STREET w:st="on"><ST1:ADDRESS w:st="on">Eagle Way</ST1:ADDRESS></ST1:STREET>, Sowton, <ST1:CITY w:st="on">Exeter</ST1:CITY>, <ST1:PLACE w:st="on"><ST1:CITY w:st="on">Devon</ST1:CITY>, <ST1:POSTALCODE w:st="on">EX2 7HY</ST1:POSTALCODE></ST1:PLACE><BR> Registered Number 2892803 Registered in <ST1:PLACE w:st="on"><ST1:COUNTRY-REGION w:st="on">England and Wales</ST1:COUNTRY-REGION></ST1:PLACE></SPAN></FONT> </P><P> <SPAN lang="EN-GB" style="font-size:7.5pt;font-family:Arial;color:gray"> The information contained in this e-mail is confidential and may be subject to legal privilege. If you are not the intended recipient, you must not use, copy, distribute or disclose the e-mail or any part of its contents or take any action in reliance on it. If you have received this e-mail in error, please e-mail the sender by replying to this message. All reasonable precautions have been taken to ensure no viruses are present in this e-mail. Landmark Information Group Limited cannot accept responsibility for loss or damage arising from the use of this e-mail or attachments and recommend that you subject these to your virus checking procedures prior to use. </SPAN><FONT color="gray"> <SPAN lang="EN-GB" style="color:gray"><O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><B><FONT size="2" color="#2a5400" face="Arial"> <SPAN lang="EN-GB" style="font-size:10.0pt;font-family:Arial;color:#2A5400;font-weight:bold"> <A href="http://www.landmarkinfo.co.uk">www.landmarkinfo.co.uk</A> <O:P></O:P></SPAN></FONT></B></P><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">--<SPAN class="Apple-converted-space"> </SPAN></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">MailScanner mailing list</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><BR></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">Support MailScanner development - buy the book off the website!<SPAN class="Apple-converted-space"> </SPAN></DIV> </BLOCKQUOTE></DIV><BR><DIV> <DIV>-- </DIV><DIV>Julian Field</DIV><DIV>www.MailScanner.info</DIV><DIV>Buy the MailScanner book at <A href="http://www.MailScanner.info/store">www.MailScanner.info/store</A></DIV><DIV>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654</DIV> </DIV><BR></DIV></BODY><br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</HTML>