This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mail stuck in quarantine, slowing down mail delivery extremly

Hi,

we've had this problem years ago on SG430, now again on SG650 HA.

There are some mail (PDF attached 9MB, but also only 387kb) getting stuck in spool.

Retrying oder restart SMTP (GUI and ssh) doesn't take effect. The message delivery log of the mail says "Scanner timeout".

Really annoing, but you can see the mails, inform the users that they have to resend it and exchange attached files via cloud services.

We call support and the scanner_timeout was increased from 3 to 15 (cc set smtp scanner_timeout 15).

Now the whole queue stops(?) when a "scanner timeout" mail comes in.
In "MailManager" "Statistics Overview" "Waiting for delivery (spooled):" the number of spooled mails increase, in the Mailmanager where you can take a look at the spool you see no mails.

If there is not much traffic, it's getting ok after waiting some minutes. ( See attached pic - a few minutes no mail delivery and after that all the mails from spool are delivered at once,  downs and peeks yesterday 16o'clock, today 9 o'clock).


But if it's to much the queue seems to got stuck completely - the longest time we waited was 3 hours - no mail in and no mail out (then the users complained massivly...) .
We had to stop and restart smtp and the mails are getting processed normally again after about 3min.
After restart smtp the "bad" mails which triggered the error are gone. Seems that they're getting rejected when smtp stops while there are in the scantime. But the sender did not get any undeliverable message.

Sophos CPU (10%) and RAM(30%) are still low while scanning and beeing stuck.

Now after setting timeout back to 3, a bad mail still stops the delivery for about 3min, the mail itself isn't displayed in spool until 15min later.

Maybe anyone has an idea or similar problems?



This thread was automatically locked due to age.
  • Hi  ,

    Good day and thanks for reaching out to Sophos Community and hope you are well. 

    You mentioned you already created a support ticket for this? May I request the generated case to be shared through DM or by replying to this thread. 

    Many thanks for your time and patience and Thank you for choosing Sophos. 

    Cheers,

    Raphael Alganes
    Community Support Engineer | Sophos Technical Support
    Sophos Support Videos Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • Hi,

    I just want to share what we find out the last months:

    Seem to be special PDFs in combination with bigger Expression lists.

    If you skip Expression list check, there'se no delay. If not, sometimes the whole mailqueue gets stuck.

    The PDFs are all scanned documents, no OCR. No matter if 80KB or 9MB:
    Seems that they are all scanned by small multifunction printers. The PDFs from our bigger copiers oder Scanning systems don't produce this problems.

    If you "reprint" the PDF in MicrosoftPrintToPDF or just do "save as" in an PDF-Programm, the PDFs don't get stuck.

    Anybody simliar problems?

    Greetings

  • We can now reproduce the Problem with freshly created PDFs. If the PDF is created by Windows Scan App and it's PDF 1.7 (seems to depend on the hardware scanning with) it takes much longer time (3 minutes instead of 3sec) to deliver an email with this attachement while Expression filter ist activated.

    We have workarounds, but a solution would be very nice.
    Still waiting for support. Ticket is opened since november...

  • Hello there, 

    thanks for providing an update. I saw that this case is being investigated now Dev Team. Senior Engineer who is handling this case also provided you an email when will you expect a response from their side. 

    In the meantime, kindly let us know should you need any further assistance from our team. 

    Many thanks for your time and patience and thank you for choosing Sophos

    Cheers,

    Raphael Alganes
    Community Support Engineer | Sophos Technical Support
    Sophos Support Videos Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.