Spam Filter ISP Forums : Has something changed? Possible bug?

Spam Filter ISP Forums : Has something changed? Possible bug? https://www.logsat.com/spamfilter/forums/ Thu, 12 Mar 2026 04:18:40 +0000 Mon, 19 Sep 2005 00:52:08 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=5329 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[Has something changed? Possible bug? : Hi again Robert Thankyou very...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6542&title=has-something-changed-possible-bug#6542 Author: sirrar
Subject: 5329
Posted: 19 September 2005 at 12:52am

Hi again Robert

Thankyou very much.

Just implemented 487. And now, as You said, a NDR is generated so that sending servers only tries to send the e-mail once.

A pitty your idea woulden't work allways. It was a good idea, unfortunatly it had an effect to assume a lot much bandwith...

Thanks again for fixing this issue!

Edited by sirrar]]> Mon, 19 Sep 2005 00:52:08 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6542&title=has-something-changed-possible-bug#6542 <![CDATA[Has something changed? Possible bug? : Torsten, The issue was the...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6541&title=has-something-changed-possible-bug#6541 Author: LogSat
Subject: 5329
Posted: 18 September 2005 at 11:41pm

Torsten,

The issue was the following. Prior to build 485, SpamFilter wascontinuosly monitoring the size of the incoming emails. As soon as thelimit was reached, SpamFilter was sending the remote server an errormessage notifying of the size restriction, then was immediatelydisconnecting them as to avoid the unnecessary reception of theremainder of the email. If the max msg size was 10MB for example, andthe email size was 200MB, this resulted in great savings of resourcesand bandwidth.

However you poointed out a problem we were not aware of. Under certaincirumstances, the remote server would not "listen" for SpamFilter'serror message, and would continue sending the email body uninterrupted.When SpamFilter forced a disconnect, without receiving the errormessage, the sender assumed there was a connection problem and retriedto send it.

With build 485 we thus increased greatly the time delay between whenSpamFilter sent the error message and the time at which SpamFilterdisconnected the sender. However again you (and we duplicated it) foundcircumstances in which the sender was being very *hardhead* and wouldnot listen for a return code until it had completely finished sendingthe *whole* email.

Unfortunately the only solution in this case has been for SpamFilter tocompletely receive the *whole* email, as only then would the stubbornsender listen and look for an error response. We tried to make thereceiving piece as less resource-intensive as possible, eliminating all(now unnecessary as the email will be discarded) decoding and RFCprocessing, but again have been forced to receive the full email beforedisconnecting the sender. This will result in a waste of bandwidth and(limited) resources, but so far appears to be the only fully reliableway to prevent the sender to keep retrying to send the message.

The build with this fix is 487, now avail in the registered user area.
]]> Sun, 18 Sep 2005 23:41:03 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6541&title=has-something-changed-possible-bug#6541 <![CDATA[Has something changed? Possible bug? : Hi again OK I will post some...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6539&title=has-something-changed-possible-bug#6539 Author: sirrar
Subject: 5329
Posted: 17 September 2005 at 2:29am

Hi again OK

I will post some additionel info in reply to your test e-mail yesterday.

I have noticed a little difference between versions prior to 485. With 485 the time from SF have concluded that the e-mail exceeds max limit to the disconnect takes several minutes now. But You will se that in the additional info i will send you (i alo include my ini file)

Best regards

Torsten

Edited by sirrar]]> Sat, 17 Sep 2005 02:29:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6539&title=has-something-changed-possible-bug#6539 <![CDATA[Has something changed? Possible bug? : Torsten, We duplicated the...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6537&title=has-something-changed-possible-bug#6537 Author: LogSat
Subject: 5329
Posted: 16 September 2005 at 3:34pm

Torsten,

We duplicated the problem remotely on your install. You're correct,it's still not fixed. We'll need to troubleshoot this a bit further, asright now I really can't tell what the problem is

.

We'll post a fix as soon as we find it.
]]> Fri, 16 Sep 2005 15:34:59 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6537&title=has-something-changed-possible-bug#6537 <![CDATA[Has something changed? Possible bug? : I gotta be away from the next...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6536&title=has-something-changed-possible-bug#6536 Author: sirrar
Subject: 5329
Posted: 16 September 2005 at 3:10pm

I gotta be away from the next 10 hours...

Maxlimit is 5 MB (5000)

best regards

Torsten Christiansen

]]> Fri, 16 Sep 2005 15:10:33 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6536&title=has-something-changed-possible-bug#6536 <![CDATA[Has something changed? Possible bug? : As You can se on my MRTG several...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6535&title=has-something-changed-possible-bug#6535 Author: sirrar
Subject: 5329
Posted: 16 September 2005 at 3:07pm

As You can se on my MRTG several prople has since tuesday been tryieng to send me some large e-mails (all exceeding 50 MB).

And they keep tryeing (not the user, but the sending server)

The sending server is one of Denmarks most respected ISP's. Teledanmark (TDC). I'm quite confident that they'r servers are OK.

Also don't see anything in my mail logs that indicates that SF is sending something to the seing server.

I could reply on your test message and attach my mail log

then You could se for yourself?

Best regards...

Torsten

]]> Fri, 16 Sep 2005 15:07:10 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6535&title=has-something-changed-possible-bug#6535 <![CDATA[Has something changed? Possible bug? : Hi again It's at the moment...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6534&title=has-something-changed-possible-bug#6534 Author: sirrar
Subject: 5329
Posted: 16 September 2005 at 3:01pm

Hi again

It's at the moment 50 MB (50000 KB).

But we could try to coordinate a smaller size for test.

I will from now on and about 12 hours from now have it set to 5000 kb (5 MB) (for test purpose).

I have several mail tryieng to be send at me right now....

http://www.sirrar.dk/mrtg/192.168.1.1_1.html

best regards

Torsten Christiansen

]]> Fri, 16 Sep 2005 15:01:10 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6534&title=has-something-changed-possible-bug#6534 <![CDATA[Has something changed? Possible bug? : Torsten, We double-checked...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6533&title=has-something-changed-possible-bug#6533 Author: LogSat
Subject: 5329
Posted: 16 September 2005 at 2:36pm

Torsten,

We double-checked internally and on our own ISP, and so far the fixappears to work fine. We'll be testing your install remotely shortly.

Edited by LogSat]]> Fri, 16 Sep 2005 14:36:01 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6533&title=has-something-changed-possible-bug#6533 <![CDATA[Has something changed? Possible bug? : Hi again. Nope I'm not...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6531&title=has-something-changed-possible-bug#6531 Author: sirrar
Subject: 5329
Posted: 16 September 2005 at 1:05pm

Hi again.

Nope I'm not convinced that is has helped.

Too large e-mails are still being resend again and again.

Best regards.

SirRar

]]> Fri, 16 Sep 2005 13:05:43 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6531&title=has-something-changed-possible-bug#6531 <![CDATA[Has something changed? Possible bug? : Hi again Thanks for the quick...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6530&title=has-something-changed-possible-bug#6530 Author: sirrar
Subject: 5329
Posted: 16 September 2005 at 9:11am

Hi again

Thanks for the quick response.

Just impelmented 485. Within a few hours I will se if it has helped. And report back.

Thanks in advance.

]]> Fri, 16 Sep 2005 09:11:00 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5329&PID=6530&title=has-something-changed-possible-bug#6530