Opps... it happens again...
First I thought my SF is running fine after upgrading to .697, but from time to time it is crashing down. 40-100 times a day.
The service automaticly is restarting after a few seconds. but while restarting the service, mails a running in the backupMX and this is just a simple mailrelay without SF. So a few dozend spams are slipping through it.
Here is one part of the logs
07.26.07 18:05:06:885 -- (6184) Connection from: 193.174.9.254 - Originating country : Germany 07.26.07 18:05:07:026 -- (6184) Resolving 193.174.9.254 - mailout10.fw.porsche.de 07.26.07 18:05:07:417 -- (6184) Mail from: mailto:porsche.financial@porsche.de - porsche.financial@porsche.de 07.26.07 18:05:07:932 -- (6184) - MAPS search done... 07.26.07 18:05:07:932 -- (6184) RCPT TO: mailto:dirk.brincks@porsche-essen.de - dirk.brincks@porsche-essen.de accepted 07.26.07 18:05:08:089 -- (6184) Scanning PDF for spam:response.pdf 07.26.07 18:05:08:182 -- (6184) Warning: error (1) scanning PDF for spam - Unexpected PDF object encountered 07.26.07 18:05:08:182 -- (6184) Warning: error scanning image for spam - Access violation at address 004047A4 in module 'SpamFilter.exe'. Read of address 00000108 07.26.07 18:05:08:198 -- (6184) Warning - Message exceeds MaxMsgSizeForKeywordScan, skipping statistical scan 07.26.07 18:05:08:198 -- (6184) Checking SURBL 07.26.07 18:05:08:198 -- (6184) EMail from mailto:porsche.financial@porsche.de - porsche.financial@porsche.de to mailto:dirk.brincks@porsche-essen.de - dirk.brincks@porsche-essen.de passes Bayesian filter - 0% spam (0ms) 07.26.07 18:05:08:386 -- (6184) Start virus scan 07.26.07 18:05:08:417 -- (6184) Starting queueing procedures 07.26.07 18:05:08:432 -- (6184) EMail from mailto:porsche.financial@porsche.de - porsche.financial@porsche.de to mailto:dirk.brincks@porsche-essen.de - dirk.brincks@porsche-essen.de was queued. Size: 89 KB, 91136 bytes 07.26.07 18:05:08:448 -- (6184) Disconnect Disconnecting: 84.125.69.169 07.26.07 18:06:12:466 -- SpamFilter ISP v3.5.4.697 Listening on 195.210.48.201:25, 07.26.07 18:06:12:466 -- (2908) Found new domain in tbl_LocalDomains: SFI. Creating new FilterObject ....
This happens whiles scanning PDFs but not all PDFs. Maybe there is a bug in SF or the PDFs ??
I have set the SpamPDFMaxPixelHeight from 800 to 1600 but now the most mails with PDF are running in quarantine and that is because there are 300-500/hour good mails with PDFs running in quarantine.
Setting size to 800 SF is crashing more often, to 1600 there is to much PDF in quarantine. Now I set it to 1200... tomorrow I know if this is better...
have a nice day
Franky
------------- QUAT.NET GmbH
|