Author Topic: Message_forwarding_timeouted  (Read 8494 times)

0 Members and 1 Guest are viewing this topic.

bbell2000

  • Guest
Message_forwarding_timeouted
« on: November 24, 2004, 02:26:58 AM »
I get the following error in my qmail log for a few emails that for some reason can't be delivered.  The message is generated by my mail gateway which relays mail to avastrelay.  Since I cannot find this remote's message in the qmail source, I assume it is being generated by avast:

_451_Message_processing_failed:_Message_forwarding_timeouted/

I've looked at the email in the queue and all appears to be in order.  My internal qmail server is delivering email just fine.  The mail is only 48K so that can't be a problem.  I've tested the internal qmail server using telnet -- it connects immediately and delivers the test mail in a timely manner.  I've run the command line scanner on the stuck mail -- it doesn't return any errors and completes the scan in 17ms.

How do I go about figuring out what's wrong?

Dublin

  • Guest
Re:Message_forwarding_timeouted
« Reply #1 on: November 24, 2004, 09:57:40 AM »
The message is generated by avastrelay. Timeout occured when was scanned e-mail relaying back to qmail.
Can you increase timeout and test send the e-mail again?

bbell2000

  • Guest
Re:Message_forwarding_timeouted
« Reply #2 on: November 24, 2004, 01:23:26 PM »
I forgot to add that detail to my original post.  After I first encountered the problem, I increased the timeout to 120 and tried to flush qmail's queue... the problem reoccurred on the the same email.

What's weird is that other emails were being properly relayed at the time.  The problem only occurred on specific emails (about five or six).

bbell2000

  • Guest
Re:Message_forwarding_timeouted
« Reply #3 on: November 26, 2004, 05:18:09 PM »
I've increased the timeout to 180 (3 minutes) and the problem still occurs.  It only happens on certain messages.  In an effort to track down the issue, I've run tcpdump on both the avast and qmail ports.  I can supply both logs if necessary.  There are two emails stuck in the queue.  I can also provide copies of these as well.  The packets for one email seems normal -- e.g., HELO, RCPT TO, MAIL FROM, DATA.  But the packets for the other one is very odd.  avast sends DATA, qmail acks, avast sends headers -- up to and including the X-Antivirus-Status.  The headers are terminated by <CRLF>.<CRLF>.  qmail acks again with:

10:39:51.201677 bellux.theotherbell.com.smtp-backdoor > bellux.theotherbell.com.34594: . ack 656 win 32767 <nop,nop,timestamp 196223691 196223691> (DF)
0x0000   4500 0034 7c2f 4000 4006 646e ac10 0103        E..4|/@.@.dn....
0x0010   ac10 0103 0339 8722 5df0 5f71 5da8 f419        .....9."]._q]...
0x0020   8010 7fff a61d 0000 0101 080a 0bb2 22cb        ..............".
0x0030   0bb2 22cb                                      ..".

Then nothing happens on that conversation for 3 minutes.  After that, avast sends:

10:42:51.151127 bellux.theotherbell.com.34594 > bellux.theotherbell.com.smtp-backdoor: F 656:656(0) ack 131 win 32767 <nop,nop,timestamp 196241685 196223691> (DF)
0x0000   4500 0034 d357 4000 4006 0d46 ac10 0103        E..4.W@.@..F....
0x0010   ac10 0103 8722 0339 5da8 f419 5df0 5f71        .....".9]...]._q
0x0020   8011 7fff 5fd2 0000 0101 080a 0bb2 6915        ...._.........i.
0x0030   0bb2 22cb                                      ..".

There are two final packets, but the mail is never delivered... and the actual body of the message is never sent.  The conversation for the other email is similar except for the fact that the body is sent... but that one doesn't get delivered either.  And deleting one of them has no effect on the other one not being delivered.

At the time this happens, other emails are being successfully scanned and delivered.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31119
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Message_forwarding_timeouted
« Reply #4 on: November 26, 2004, 05:23:35 PM »
did you increase the timeout in both your email client and avast4.ini?

bbell2000

  • Guest
Re:Message_forwarding_timeouted
« Reply #5 on: November 26, 2004, 07:43:16 PM »
This is avast for Linux.  There is no avast4.ini.  But to answer the question I think you meant to ask... I increased the timeout in both /etc/avastd.conf and /etc/rc.d/init.d/avastrelay..  qmail' timeout for both establishing a connection and receiving data is also sufficient.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31119
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Message_forwarding_timeouted
« Reply #6 on: November 26, 2004, 07:45:23 PM »
Yes that is what I meant. Sorry for putting it wrong in my question.

Since not much people here are using Avast for Linux, it becomes kind of a habbit to say avast4.ini I guess :)

Dublin

  • Guest
Re:Message_forwarding_timeouted
« Reply #7 on: December 02, 2004, 06:37:21 PM »
It seems the problem is in appending string to MIME header.
There were released avast4linux-1.0.8beta version. Can you try avastrelay from that version?