System Slow?

[turetzsr]

...Is it just me or is everyone who submits spam for parsing via e-mail been having very slow turnaround yesterday and today? I normally receive replies within 1/2 hour but it's been upwards of an hour or more this week.

[dra007]

It does have its ups and downs. I submit on the heldmail page after dragging the spam into the heldmail folder on my own client and still experience the occasional slowdowns reporting. But this seems to be the fastest way to report for me.

[StevenUnderwood]

I submitted 2 messages at 7:48AM EDT and received the reply at 7:56AM EDT which is actually slow for that time of the morning. Have not noticed a great slowdown at all.

[turetzsr]

I submitted 2 messages at 7:48AM EDT and received the reply at 7:56AM EDT which is actually slow for that time of the morning.  Have not noticed a great slowdown at all.

17119[/snapback]

...Thanks for your feedback, dra007 and Steven.

...Steven: you submit by sending attachments via e-mail?

...Here's my experience today: e-mails with attachments sent: 2 (one [8 attached spam] at 8:18 EDT, one [four attached spam] at 8:46 EDT); replies from SpamCop: 0. OTOH, sometimes one of the attached spam can not be parsed (presumably due to the screwup in Microsoft Exchange) so that could be the case here.

[turetzsr]

...Update: although I did not receive the reply e-mail, I went to the web site (http://www.spamcop.net/) and the "Report Now" links were there for the spam I sent at 8:46 EDT.

[turetzsr]

...New update: I gave up on the e-mail I sent at 8:18 EDT and at 9:29 EDT I split it into two separate e-mails, each with 4 spam as attachments. I received a reply at 9:49 and completed the reporting at 9:53 EDT.

[StevenUnderwood]

Steven: you submit by sending attachments via e-mail?

Yes. The message I was telling you about was from Lotus Notes with 2 attachments.

I just sent another test with 14 attachments at 10:08 AM and received the reply at 10:15. Most of those are too old to report, however.

[turetzsr]

Steven: you submit by sending attachments via e-mail?

Yes. The message I was telling you about was from Lotus Notes with 2 attachments.

I just sent another test with 14 attachments at 10:08 AM and received the reply at 10:15. Most of those are too old to report, however.

17126[/snapback]

...Okay, thanks, Steven. I guess they're just picking on me, then. <frown>

...Latest update: at 10:27 I received a reply to one of the e-mails I sent at 9:55:

<snip>
SpamCop is now ready to process your spam.

Use links to finish spam reporting (members use cookie-login please!):
http://www.spamcop.net/sc?id=z660621188z991341068e7692d6dde435581fa04a1dz
http://www.spamcop.net/sc?id=z660621198z19ea4125017bcc1161785a341cfc261bz

The email which triggered this auto-response had the following headers:
 Return-Path: <xxx[at]xxx.com>
Received: from vmx1.spamcop.net (sc-smtp1.eq.ironport.com [192.168.18.81])
	by sc-app3.eq.ironport.com (Postfix) with ESMTP id 92B78142CB
	for <submit.xxxxxxxxxxxxxx[at]spam.spamcop.net>; Tue, 14 Sep 2004 07:23:09 -0700 (PDT)
<snip>

...Do I interpret this correctly that the problem is between me and the IronPort server, since I sent it at 9:55 but it wasn't received until 10:23? Note: all times EDT unless otherwise indicated.

[StevenUnderwood]

Well Steve, you snipped the header showing you submitting the message at 9:55 but I think I will trust you on that one. It could be that your mailserver is having a hard time getting the messages through to spamcop (network problem near your end?).

The headers from my message:

Received: from vmx2.spamcop.net (sc-smtp2.eq.ironport.com [192.168.18.82])

by sc-app3.eq.ironport.com (Postfix) with ESMTP id 2A5601434E

for <submit.xxxxx[at]spam.spamcop.net>; Tue, 14 Sep 2004 07:14:20 -0700 (PDT)

Received: from mail.kopin.com (199.79.137.66)

  by vmx2.spamcop.net with ESMTP; 14 Sep 2004 07:14:18 -0700

[turetzsr]

Well Steve, you snipped the header showing you submitting the message at 9:55 <snip>

17134[/snapback]

...Oops, yes, I did. I'll do better next time (see below). <g>

...Update: at 11:33, I finally received a reply to the e-mail submission I sent at 8:46! Note that the submission web page had the "Report Now" links available back at 9:40 or earlier (again, all times are EDT). The response was, in part:

PLEASE HELP SUPPORT THIS SERVICE!
SpamCop is free.  However, if you like the service please pay for it:
http://www.spamcop.net/upgradeaccount.shtml?xxxxxxxxxxxxxx

SpamCop is now ready to process your spam.

Use links to finish spam reporting (members use cookie-login please!):
http://www.spamcop.net/sc?id=z660553906za25c39f8107dbd6148303ae210d80623z
http://www.spamcop.net/sc?id=z660553908z4638d237929fe3b7366cdc639903d478z
http://www.spamcop.net/sc?id=z660553909z7295c913648c09b1992f76a4de9e1968z
http://www.spamcop.net/sc?id=z660553910z9205d133eaa953fa3e2b34ec615694cfz


The email which triggered this auto-response had the following headers:
 Return-Path: <xxx.xxx[at]xxx.com>
Received: from vmx1.spamcop.net (sc-smtp1.eq.ironport.com [192.168.18.81])
	<tab>by sc-app2.eq.ironport.com (Postfix) with ESMTP id DF15C51592F
	<tab>for <submit.xxxxxxxxxxxxxx[at]spam.spamcop.net>; Tue, 14 Sep 2004 06:31:25 -0700 (PDT)
Received: from usea-naimss1.xxx.com (xx.xx.xx.xx)
  by vmx1.spamcop.net with ESMTP; 14 Sep 2004 06:31:25 -0700
Received: from <snip> ([xx.xx.xx.xx]unverified) by usea-naimss1 with InterScan Messaging Security Suite; Tue, 14 Sep 2004 07:48:25 -0500
Received: from <snip> ([xx.xx.xx.xx]) by <snip> with Microsoft SMTPSVC(6.0.3790.47);
	<tab> Tue, 14 Sep 2004 07:46:40 -0500
Received: from <snip> ([xx.xx.xx.xx]) by <snip> with Microsoft SMTPSVC(6.0.3790.47);
	<tab> Tue, 14 Sep 2004 07:46:28 -0500
X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed;
	<tab>boundary="----_=_NextPart_001_01C49A58.CF82C46E"
Subject: 14-Sep 7:39 - 8:30
Date: Tue, 14 Sep 2004 08:46:06 -0400
Message-ID: <E8F678F82CE6A34C9B0EC5F4134E9C37029A5F09[at]<snip>>
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: 
Thread-Topic: 14-Sep 7:39 - 8:30
Thread-Index: AcSaWM1NFaiIpyWxTO2DWP6pJFkmeA==
From: "<alias>" <xxx.xxx[at]xxx.com>
To: <submit.xxxxxxxxxxxxxx[at]spam.spamcop.net>
X-OriginalArrivalTime: 14 Sep 2004 12:46:28.0080 (UTC) FILETIME=[DA23DF00:01C49A58]

So it looks like it arrived at IronPort at 9:31 EDT, almost an hour after I sent it, and it came back to me at 11:33, about two hours after IronPort received it. I conclude the problem is here (although I see no other evidence of it). I'll check with our network admins.