Spam Filter ISP Support

Error in log

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5931
Printed Date: 22 February 2025 at 5:53pm

Topic: Error in log

Posted By: brekkjen
Subject: Error in log
Date Posted: 20 December 2006 at 9:00am

I've got this error creeping up in my log today, any suggestions?
It seems to occur when people try to deliver quarantined mail and I've gotten some complaints that such mail is in fact not delivered.

Running 3.1.3.605 registered

12.20.06 10:00:05:965 -- (31868) Exception occurred during ProcessQuarantineQueue - Msg.LoadFromStream: Max line length exceeded.

Replies:

Posted By: brekkjen
Date Posted: 20 December 2006 at 9:12am

This might be related?

12.20.06 15:06:21:281 -- (3532) Adding to D:\SF-Filterfiles\White\AutoWhiteListForceDelivery.txt:"send eraddress"|"rcptaddress"
12.20.06 15:06:21:281 -- (3532) Delivering quarantined email from <"senderaddress"> to "rcptaddress"
12.20.06 15:06:21:328 -- (2088) Time to add Msg to Bayes corpus:0
12.20.06 15:06:21:343 -- (2412) Sending email from "senderaddres" to "rcptaddress" --
12.20.06 15:06:21:343 -- (3612) Exception occurred during TUpdateListViewQuarantineThread.Execute: ( 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 21) The connection cannot be used to perform this operation. It is either closed or invalid in this context
12.20.06 15:06:21:375 -- (3528) Exception occurred during TUpdateListViewQuarantineThread.Execute: ( 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 21) Access violation at address 0054C0F8 in module 'SpamFilterSvc.exe'. Read of address 00000000
12.20.06 15:06:21:500 -- (2412) EMail from "senderaddress" to "rcptaddress" -- was forwarded to smtp.destinationserver.com:25

Posted By: LogSat
Date Posted: 20 December 2006 at 4:13pm

If the events had occurred closer togeter, there may have been a correlation. They are several hours apart however, so that is less likely.

In either case, both of the errors are absolutely not normal. Could you please zip the entire logfile and email it to us at support at logsat dot com?

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: brekkjen
Date Posted: 20 December 2006 at 5:40pm

Yea, I know they'r not directly related. The second error occured after I restarted the box and tried a delivery of a quarantined message via the GUI. The message was delivered alright execpt that error showed in the logs. I'll zip and mail the log to u first thing in the morning. Morning for us anyways... :)

Posted By: LogSat
Date Posted: 21 December 2006 at 10:53pm

Received the logs. The error:

Exception occurred during TUpdateListViewQuarantineThread.Execute

is occurring when you interact with the Quarantine tab in SpamFilter's GUI, most likely when clicking on the "Refresh" button. The problem is strictly related to the user (you) interacting with the control. While the error should not happen, it does not interfere with SpamFilter's functionality. We've seen a few instances of similar errors, and are trying to fix them in the next release of SpamFilter.

On the other hand, the errors:

Exception occurred during ProcessQuarantineQueue - Msg.LoadFromStream: Max line length exceeded

are related to the specific messages being processed. In your logs, they are followed by another error similar to:

12.20.06 10:00:06:059 -- (31896) EMail from: ?????_no_reply@???????.com to: ???@??? -- was returned to sender - server error - Invalid Message file:D:\SpamFilter\queue\Ind151F.tmp

There is something in these messages that is causing the delivery to fail. Unfortunately SpamFilter by default will delete the problem-message. But...

Please change the following setting in the SpamFilter.ini file:

EnableBadMailDir=1

This will cause SpamFilter to save a copy of messages that cause delivery problems to the \SpamFilter\badmail directory. If you can then replicate the problem, a copy of the message file will be saved to that directory. You may find other message files in that directory, it does not indicate a problem, as there may be legitimate reasons for certain "bad messages".
Please zip and email us both SpamFilter's activity logfile, and a copy of the \badmail directory.

As a side note, usually there is never a need for SpamFilter to be restarted when making changes to the configuration files, but in this case SpamFilter does need to be restarted.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: LogSat
Date Posted: 30 December 2006 at 1:16am

I believe we found the cause of the errors. It's due to non-RFC compliant formatting of email files. Please look at the email file "Ind737F.tmp" in your badmail directory. It does not comply with RFC standards, and contains both of the "problems" that are causing SpamFilter to reject the message. If you edit the file with notepad you'll be able to verify the following.

The first is the fact that one of the lines in the message is 101,009 characters long. per RFC 2821 ( http://www.ietf.org/rfc/rfc2821.txt - http://www.ietf.org/rfc/rfc2821.txt ) each line of text in an email should be no more than 1,000 characters. SpamFilter will accept up to 16,384 characters in lenght, but in this case we are well over the limits! This will cause the error:

Exception occurred during ProcessQuarantineQueue - Msg.LoadFromStream: Max line length exceeded.

to be logged.

The second problem is an invalid date format used in the "Date" header:

Date: 29. desember 2006 10:00:00
Per RFC 822 ( http://www.ietf.org/rfc/rfc822.txt - http://www.ietf.org/rfc/rfc822.txt ) the date format in the "Date:" header must have the month specified as "Dec", while in that email it's specified as "desember". This will casue the error:

Invalid Message file:D:\SpamFilter\queue\Ind737F.tmp

to be logged.

Are you generating these emails programmatically, or is a mail server generating them? If you are creating them, it should be rather easy to fix the formatting to make it RFC compliant. If they are coming from a mail server, we recommend you contact them to inform them of the problems.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP