[Mimedefang] timeout before data read, where=body

[Marcus]

Hi Alexander,

Am Sonntag, den 11.04.2010, 15:58 +0200 schrieb Alexander Dalloz:
> Am 11.04.2010 15:06, schrieb Marcus:
> > Hi,
> > 
> > since yesterday I get a "timeout before data read, where=body" with a
> > single mail sent via googlemail. It's not spam/not a virus and from the
> > subject line and the message size of 25049183 it seems to have an
> > attachment (may be a PDF). Clamav scans up to a size of 10MB. The
> > message size itself seems not to be the problem. I've seen bigger mails
> > in the log.
> 
> > Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: Milter
> > (mimedefang): timeout before data read, where=body
> > Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: Milter
> > (mimedefang): to error state
> > Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661: Milter: data,
> > reject=451 4.3.2 Please try again later
> > Apr 11 13:01:41 server sm-mta[29661]: o3BB0W83029661:
> > to=<xxx at domain.de>, delay=00:01:08, pri=25079183, stat=Please try again
> > later
> > Apr 11 13:01:48 server mimedefang.pl[24748]:
> > MDLOG,o3BB0W83029661,mail_in,,,<xxx at gmail.com>,<xxx at domain.de>,Fwd: xxx
> > Apr 11 13:01:48 server mimedefang[7286]: o3BB0W83029661: smfi_addrcpt
> > returned MI_FAILURE
> > Apr 11 13:01:48 server mimedefang[7286]: o3BB0W83029661: smfi_addheader
> > returned MI_FAILURE
> 
> > Thanks for helping,
> > Marcus
> 
> Hi Marcus,
> 
> looks like you have a timeout value of 60 seconds set in your
> sendmail.mc for the INPUT_MAIL_FILTER mimedefang (maybe something like
> "T=S:1m"), which is too short for processing such large mails.

Ups, yes I do have. I've searched all config files, but forgot these
flags. Too much wine last night ;)

--------
define(`MILTER',1)
INPUT_MAIL_FILTER(`greylist',`S=local:/var/run/milter-greylist/milter-greylist.sock, F=, T=S:1m;R:1m')dnl

INPUT_MAIL_FILTER(`mimedefang',`S=unix:/var/spool/MIMEDefang/mimedefang.sock, F=T, T=S:1m;R:1m;E:5m')dnl
--------

May be the timeout of 1 minute for sending information from the MTA to
mimedefang (S:1m) and for reading reply (R:1m) is to short. I set them
to 5 minutes:

INPUT_MAIL_FILTER(`mimedefang',`S=unix:/var/spool/MIMEDefang/mimedefang.sock, F=T, T=S:5m;R:5m;E:10m')dnl

Could someone post his values or tell me if these values are reasonable.

Thanks,
Marcus