Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Error in log
  FAQ FAQ  Forum Search   Register Register  Login Login

Error in log

 Post Reply Post Reply
Author
brekkjen View Drop Down
Newbie
Newbie
Avatar

Joined: 23 February 2005
Location: Norway
Status: Offline
Points: 15
Post Options Post Options   Thanks (0) Thanks(0)   Quote brekkjen Quote  Post ReplyReply Direct Link To This Post Topic: Error in log
    Posted: 20 December 2006 at 9:00am

I've got this error creeping up in my log today, any suggestions?
It seems to occur when people try to deliver quarantined mail and I've gotten some complaints that such mail is in fact not delivered.

Running 3.1.3.605 registered

12.20.06 10:00:05:965 -- (31868) Exception occurred during ProcessQuarantineQueue - Msg.LoadFromStream: Max line length exceeded.

Back to Top
brekkjen View Drop Down
Newbie
Newbie
Avatar

Joined: 23 February 2005
Location: Norway
Status: Offline
Points: 15
Post Options Post Options   Thanks (0) Thanks(0)   Quote brekkjen Quote  Post ReplyReply Direct Link To This Post Posted: 20 December 2006 at 9:12am

This might be related?

12.20.06 15:06:21:281 -- (3532) Adding to D:\SF-Filterfiles\White\AutoWhiteListForceDelivery.txt:"send eraddress"|"rcptaddress"
12.20.06 15:06:21:281 -- (3532) Delivering quarantined email from <"senderaddress"> to "rcptaddress"
12.20.06 15:06:21:328 -- (2088) Time to add Msg to Bayes corpus:0
12.20.06 15:06:21:343 -- (2412) Sending email from "senderaddres" to "rcptaddress" --
12.20.06 15:06:21:343 -- (3612) Exception occurred during TUpdateListViewQuarantineThread.Execute:  ( 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 21) The connection cannot be used to perform this operation. It is either closed or invalid in this context
12.20.06 15:06:21:375 -- (3528) Exception occurred during TUpdateListViewQuarantineThread.Execute:  ( 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 21) Access violation at address 0054C0F8 in module 'SpamFilterSvc.exe'. Read of address 00000000
12.20.06 15:06:21:500 -- (2412) EMail from "senderaddress" to "rcptaddress" --  was forwarded to smtp.destinationserver.com:25

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 20 December 2006 at 4:13pm
If the events had occurred closer togeter, there may have been a correlation. They are several hours apart however, so that is less likely.

In either case, both of the errors are absolutely not normal. Could you please zip the entire logfile and email it to us at support at logsat dot com?
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
brekkjen View Drop Down
Newbie
Newbie
Avatar

Joined: 23 February 2005
Location: Norway
Status: Offline
Points: 15
Post Options Post Options   Thanks (0) Thanks(0)   Quote brekkjen Quote  Post ReplyReply Direct Link To This Post Posted: 20 December 2006 at 5:40pm

Yea, I know they'r not directly related. The second error occured after I restarted the box and tried a delivery of a quarantined message via the GUI. The message was delivered alright execpt that error showed in the logs. I'll zip and mail the log to u first thing in the morning. Morning for us anyways... :)

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 21 December 2006 at 10:53pm
Received the logs. The error:

Exception occurred during TUpdateListViewQuarantineThread.Execute

is occurring when you interact with the Quarantine tab in SpamFilter's GUI, most likely when clicking on the "Refresh" button. The problem is strictly related to the user (you) interacting with the control. While the error should not happen, it does not interfere with SpamFilter's functionality. We've seen a few instances of similar errors, and are trying to fix them in the next release of SpamFilter.

On the other hand, the errors:

Exception occurred during ProcessQuarantineQueue - Msg.LoadFromStream: Max line length exceeded

are related to the specific messages being processed. In your logs, they are followed by another error similar to:

12.20.06 10:00:06:059 -- (31896) EMail from: ?????_no_reply@???????.com to: ???@??? --  was returned to sender - server error - Invalid Message file:D:\SpamFilter\queue\Ind151F.tmp

There is something in these messages that is causing the delivery to fail. Unfortunately SpamFilter by default will delete the problem-message. But...

Please change the following setting in the SpamFilter.ini file:

EnableBadMailDir=1

This will cause SpamFilter to save a copy of messages that cause delivery problems to the \SpamFilter\badmail directory. If you can then replicate the problem, a copy of the message file will be saved to that directory. You may find other message files in that directory, it does not indicate a problem, as there may be legitimate reasons for certain "bad messages".
Please zip and email us both SpamFilter's activity logfile, and a copy of the \badmail directory.

As a side note, usually there is never a need for SpamFilter to be restarted when making changes to the configuration files, but in this case SpamFilter does need to be restarted.

Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 30 December 2006 at 1:16am
I believe we found the cause of the errors. It's due to non-RFC compliant formatting of email files. Please look at the email file "Ind737F.tmp" in your badmail directory. It does not comply with RFC standards, and contains both of the "problems" that are causing SpamFilter to reject the message. If you edit the file with notepad you'll be able to verify the following.
 
The first is the fact that one of the lines in the message is 101,009 characters long. per RFC 2821 (http://www.ietf.org/rfc/rfc2821.txt) each line of text in an email should be no more than 1,000 characters. SpamFilter will accept up to 16,384 characters in lenght, but in this case we are well over the limits! This will cause the error:
Exception occurred during ProcessQuarantineQueue - Msg.LoadFromStream: Max line length exceeded.
to be logged.
 
The second problem is an invalid date format used in the "Date" header:
Date: 29. desember 2006 10:00:00
Per RFC 822 (http://www.ietf.org/rfc/rfc822.txt) the date format in the "Date:" header must have the month specified as "Dec", while in that email it's specified as "desember". This will casue the error:
Invalid Message file:D:\SpamFilter\queue\Ind737F.tmp
to be logged.
 
Are you generating these emails programmatically, or is a mail server generating them? If you are creating them, it should be rather easy to fix the formatting to make it RFC compliant. If they are coming from a mail server, we recommend you contact them to inform them of the problems.

Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.062 seconds.