Error: Decomposition time out (the message has taken longer than the configured time seconds to decompose)

book

Article ID: 171120

calendar_today

Updated On:

Products

Messaging Gateway

Issue/Introduction

Decomposition time out (the message has taken longer than the configured time seconds to decompose)

Possible error code: 27225

The following is an example of the error message as it appears in the bmserver_log.

"[27225] Decomposition time out (the message has taken longer than the configured 60 seconds to decompose)."

Cause

The message currently being scanned takes more time than the amount of time that is specified in the warning to scan. The default time for the warning to scan is 60 seconds. This is most likely because the message is extremely complex, with a number of attachments, or perhaps a ZIP file with several hundred files, or something about the message is causing scanning to take much longer than expected. It is possible that this condition can be worsened by the system being under heavy load, particularly in a virtual environment.

If virus scanning is enabled, the message is marked as Unscannable, and the appropriate policy action is performed. The policy action that is performed by default is delete message. The message scan stops when the current message part or file attachment is finished being scanned, and the remaining message parts and attachments are not scanned.

Resolution

No action is necessary. The message that causes this warning completes processing and the appropriate actions are applied. If virus scanning is not enabled, Symantec recommends that you enable virus scanning, and set the desired action for the messages that are Unscannable.

  • If you get this message often, you may consider changing your business practices to avoid the email messages with attachments causing this warning.
  • If you want to increase the timeout value, go to (Protocols -> Settings -> Content Scanning)
  • Under Container Limits, edit "Maximum time to open container". The default setting is 60 seconds.

(NOTE: Use caution when modifying this setting. It protects your environment from a denial-of-service attack, where a specially constructed message or multiple messages consume all scanning resources on your system and hence blocks mail flow.)