> -----Original Message-----
> From: exim-users-bounces@???
> [mailto:exim-users-bounces@exim.org] On Behalf Of Christian Balzer
> Sent: Tuesday, August 01, 2006 2:03 AM
> To: exim-users@???
> Subject: Re: [exim] Incoming duplicates
>
>
> I can confirm this MSN behavior, one recipient here was at
> the end of some 8.8MB mail which must have been a
> specifically crafted mime/mail bomb.
> It took SA 160s (98s w/o Bayes) to handle it, while usually
> mails in this size range take less than 5 seconds (including
> all DNS/DCC/Razor checks).
> Note the 98s up there, which means that they're not even
> waiting 2 minutes.
In my case, the messages are only about 5kB each!
I can confirm (based on Tony's recommendation to enable more logging
options) that the remote server is indeed dropping the connection.
Clearly the "problem" on my end is that the machine in question is
only 64MB and doing Sophos, ClamAV, and SpamAssassin scanning.
Based on an issue I was seeing last month with Outlook clients and
low timeouts, I came up with a solution to detect duplicates (using Perl and
SQLite). I'll just adjust that to work for this.
Chris
