Print Page | Close Window

Problem sending email from quarantine

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5614
Printed Date: 22 December 2024 at 3:57pm


Topic: Problem sending email from quarantine
Posted By: lyndonje
Subject: Problem sending email from quarantine
Date Posted: 16 May 2006 at 11:41am
I've stumbled across an email in the quarantine that I can't send. The web interface sets the deliver flag, and SF attemps to deliver the email and then sets the expire flag. Other emails seem to be fine so I'm not sure what the problem is with this one. I've reversed the flags, and attemped re-sending however the same errors repeat. The error in the log is:

05/16/06 15:58:40:855 -- (30300) Adding to C:\Program Files\SpamFilter\AutoWhiteListForceDelivery.txt: 53abel@pgawtn.com|user@domain.com
05/16/06 15:58:40:871 -- (30300) Delivering quarantined email from <53abel@pgawtn.com> to user@domain.com
05/16/06 15:58:40:871 -- (30300) Exception occurred during ProcessQuarantineQueue - Msg.LoadFromStream: Read Timeout
05/16/06 15:58:41:074 -- (50276) EMail from: 53abel@pgawtn.com to: user@domain.com  was returned to sender - server error - Read Timeout
05/16/06 15:58:41:308 -- (50276) Error-email from 53abel@pgawtn.com to user@domain.com  was forwarded to 1.2.3.4
05/16/06 15:58:41:308 -- (50276)  - forwarding to:1.2.3.4 - server error - Read Timeout

The email content is still in tblMsgs, which I can pull out via manual query and web interface. Just doesn't want to deliver it?



Replies:
Posted By: LogSat
Date Posted: 16 May 2006 at 4:49pm
lyndonje,

Can you please check to see if the message body ends with the end of email sequence:

<CL><LF>.<CRL><LF>

From the error (Read Timeout) it appears that somehow that the standalone period at the end of the email (<CL><LF>.<CRL><LF>) is missing.

Without that sequence, the SpamFilter is not able to process the message. If that is the case, it is strange that the message was quarantined and received to begin with...


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: lyndonje
Date Posted: 17 May 2006 at 3:48am
Seems like thats the problem, the email ends:

"</html>      ------=_NextPart_000_0000_84B83B1B.AB78F192--  &nb sp; "

Where another email ends:

"  ------=_NextPart_000_0018_01C676B2.CB1539EF--  &nb sp; .  "

How would this happen?


Posted By: LogSat
Date Posted: 17 May 2006 at 6:18pm
Well... as I said in the previous post, yes, it is very strange it was received to begin with. The "Read Timeout" error applies even when receiving an incomplete message...

The "simplest" way to allow it to be delivered is to edit the record in the database (in the tblMsgs table) to add the missing <CR><LF>.<CR><LF> sequence at the end of the message.

"Simplest" is in quotes as I realize it's not simple at all...
 


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: lyndonje
Date Posted: 18 May 2006 at 4:03am
Well the email in this instance isnt important, but what is worrying is any other (customer) emails that this happens to, they'll click send and expect to receive the email, SF will try to deliver it but fail and set the expire flag so that the email is deleted. Any way this can be improved?


Posted By: LogSat
Date Posted: 18 May 2006 at 4:01pm
Unfortunately I do not have an answer for that, as incoming emails missing the <CR><LF>.<CR><LF> sequence are not normally received, so that email should have never been stored in the DB to begin with. Perhaps if you can zip us SpamFilter's activity log for the day when that email was received we may be able to find something there.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: Simone
Date Posted: 27 February 2007 at 11:26am
I have the same problem, but not in the quarantine, directly in forwarding message to external smtp server.

I got a lot of messages in queue folder without the <CR><LF>.<CR><LF> sequence and it goes on sending every 60 minutes the same email (totally received by the detination server) until it reach the spamfilter.ini hours limit set.

Why i get thos email ? it shouldn't be discarded directly by SF?

Lookinf logs i saw that is all normal until i get "Read timeout forwarding to: xyz@sfffssff.tld


Posted By: Simone
Date Posted: 27 February 2007 at 12:36pm
i'm looking better the problem and i noticed that it happens only in the domain that relay to a different server from all the others and it has been set on local domain task as different from default.

i know that it use spamassassin in his smtp server.

The emails end with:

------=_NextPart_000_BFCD7_01C746C9.8EB5D300--
.

Is it correct?


Posted By: Simone
Date Posted: 27 February 2007 at 12:44pm
....it happens with the 3.1.3.614 version...


Posted By: LogSat
Date Posted: 27 February 2007 at 1:26pm
Simone,

I'm not sure I understand. In the 1st post you mention that the message in the queue folder does not have the <CR><LF>.<CR><LF> sequence. However in your last post you say the message ends with:

------=_NextPart_000_BFCD7_01C746C9.8EB5D300--
.

which would indicate that the <CR><LF>.<CF><LF> sequence is there. Let me reformat the above indicating the hidden characters:

------=_NextPart_000_BFCD7_01C746C9.8EB5D300--<CR>< LF>
.<CR><LF>


Can you confirm which of the two cases is actually occurring?



-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP



Print Page | Close Window