Print Page | Close Window

Mysql errors after keyword found

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5868
Printed Date: 14 July 2025 at 11:57am


Topic: Mysql errors after keyword found
Posted By: DavidF
Subject: Mysql errors after keyword found
Date Posted: 09 November 2006 at 7:26pm
Hi

We have been experiencing problems with the database connection to mysql after keywords are detected in messages. I first noticed the problem after doubling the default keyword filter size limit. Putting the limit size back made a big difference to the frequency however we are still getting the error.

It also occurs when a banned attachment is blocked. I suspect it is something to do with the size of the attachment that is being written to the quarantine DB. The following is a sample of the errors received from our log:
=============================
11/08/06 08:50:50:582 -- (9760) Found Keywords: [Found prohibited attachment: Judgement1.wmv]
11/08/06 08:50:50:582 -- (9760) EMail from user@address.co.nz to other@other.co.nz, other1@other.co.nz matches content filter rules - rejected.
11/08/06 08:50:50:941 -- (9760) Created thread (944) to add email to quarantine
11/08/06 08:50:51:347 -- (9760) Blacklist cache - Added 210.54.141.243 to limbo
11/08/06 08:50:51:988 -- (9760) SFDB - Added 210.54.141.243 - Response: Error=0
11/08/06 08:50:51:988 -- (9760) Disconnect
11/08/06 08:50:52:316 -- (944) Error occurred during TAddToQuarantineThread when accessing the quarantine database: [MySQL][ODBC 3.51 Driver][mysqld-4.1.8-nt]Lost connection to MySQL server during query ( 83 84 85 86 86a 86b 86c 87 88 89 90 91)

=================================
11/10/06 08:50:51:238 -- (2328) Connection from: 207.46.50.72  -  Originating country : United States
11/10/06 08:50:52:613 -- (2328) Resolving 207.46.50.72 - mail-sin1.microsoft.com
11/10/06 08:50:53:457 -- (2328) found SPF record for microsoft.com: v=spf1 mx include:_spf-a.microsoft.com include:_spf-b.microsoft.com include:_spf-c.microsoft.com ~all
11/10/06 08:50:54:019 -- (2328) found SPF record for _spf-a.microsoft.com: v=spf1 ip4:213.199.128.139 ip4:213.199.128.145 ip4:207.46.50.72 ip4:207.46.50.82 a:delivery.pens.microsoft.com a:mh.microsoft.m0.net mx:microsoft.com ~all
11/10/06 08:50:54:019 -- (2328) SPF query result: pass
11/10/06 08:50:54:019 -- (2328) - SPF analysis for _spf-a.microsoft.com done: - pass
11/10/06 08:50:54:019 -- (2328) SPF query result: pass
11/10/06 08:50:54:019 -- (2328) - SPF analysis for microsoft.com done: - pass
11/10/06 08:50:54:019 -- (2328) RCPT TO: user@address.co.nz accepted
11/10/06 08:51:02:988 -- (2328) Found Keywords: [((?i)(\boem\b))]
11/10/06 08:51:02:988 -- (2328) EMail from user@address.co.nz to other@other.co.nz matches content filter rules - rejected.
11/10/06 08:51:03:035 -- (2328) Created thread (9752) to add email to quarantine
11/10/06 08:51:03:316 -- (9752) Error occurred during TAddToQuarantineThread when accessing the quarantine database: [MySQL][ODBC 3.51 Driver][mysqld-4.1.8-nt]Lost connection to MySQL server during query ( 83 84 85 86 86a 86b 86c 87 88 89 90 91)
============================
Has anyone come across this problem or have any ideas for a resolution? At the moment restarting SF seems to be the only way to reconnect to the quarantine. Unfortunately if the error is not seen to occur a lot of email doesn't make it to the quarantine.

Regards
David Fox



Replies:
Posted By: LogSat
Date Posted: 14 November 2006 at 12:21am
David,

You may be exceeding one of MySQL's default limits when SpamFilter tries to upload large files.

Changing the "max_allowed_packet" setting in MySQL (it should default to 1MB) to a higher value, ex 16MB, could solve the issue.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: DavidF
Date Posted: 14 November 2006 at 4:29pm
Roberto

Thanks very much for the info. I have modified the settings and will see how it goes.

Regards
David


Posted By: DavidF
Date Posted: 05 December 2006 at 12:40am
Roberto

Just a note to let you know that we haven't had a problem with mySQL going offline since making the changes to the allowed packet size.

Thanks very much for your help.

Regards
David



Print Page | Close Window