簡介

本檔案將說明錯誤訊息「掃描問題：超出每個表達式/資料限制的最大工作量」，以及如何解決由此引起的問題。

背景資訊

錯誤消息「Scanning Problem:超出每個表達式/資料限制的最大工作量」可能是由字典條目、內容過濾器或具有許多正規表示式(RegEx)匹配項的消息過濾器造成的。出現此錯誤的原因如下：

• 詞典中列出大量條目時。
• 包含可變長度匹配的正規表示式(RegEx)(示例：.*、.+或.{5,})。

大型字典和寬匹配的正規表示式需要大量系統資源，應避免使用。

「每個表達式的最大工作量」錯誤消息示例

郵件日誌

Thu Feb 15 12:01:20 2021 Warning: MID #######, 
Message Scanning Problem: maximum work per expression/data limit exceeded

郵件跟蹤

Message ####### encountered message scanning error: maximum work per expression/data limit exceeded

應用程式故障

An application fault occurred: ('egg/filters.py expand_short_url|1570', 
"<type 'exceptions.RuntimeError'>", 'maximum work per expression/data limit exceeded', 
'[egg/omh.py queue_worker_thread|3733] [egg/omh.py process_item|4209] 
[egg/omh.py pass_spamcheck|6402] [egg/omh.py update_url_reporting_info|4951] 
[egg/filters.py get_web_info|1810] [egg/filters.py fetch_urlinfo|1480] 
[egg/filters.py get_url_info|1658] [egg/filters.py get_expanded_url_list|1606] 
[egg/filters.py expand_short_url|1570]') MID: #######

疑難排解

詞典

通過GUI

1. 登入到安全電子郵件網關的GUI。
2. 將滑鼠懸停在郵件策略上。
3. 按一下Dictionaries。
4. 檢視詞典和條目。

通過CLI

> dictionaryconfig

Currently configured content dictionaries:
1. Test

Choose the operation you want to perform:
- NEW - Create a new content dictionary.
- EDIT - Modify a content dictionary.
- DELETE - Remove a content dictionary.
- RENAME - Change the name of a content dictionary.
- CLUSTERSET - Set how content dictionaries are configured in a cluster.
- CLUSTERSHOW - Display how content dictionaries are configured in a cluster.
[]>

檢視詞典和條目。

內容過濾器

通過GUI

1. 登入到安全電子郵件網關的GUI。
2. 將滑鼠懸停在郵件策略上。
3. 按一下「Incoming Content Filters」或「Outgoing Content Filters」。
4. 檢查過濾器。

通過CLI

> policyconfig

Would you like to configure Incoming Mail Policy or Outgoing Mail Policies or Match Headers Priority?
1. Incoming Mail Policies
2. Outgoing Mail Policies
3. Match Headers Priority
[1]> 1 <- Enter 1 or 2

Incoming Mail Policy Configuration
Name: Anti-Spam: Anti-Virus: Advanced Malware Protection: Graymail: Content Filter:
Outbreak Filters: Advanced Phishing Protection
----- ------------- ----------- ---------------------------- ------------- -----------------
---------------- ----------------------------
DEFAULT Off Sophos Off Off Enabled
Retention Time: N/A

Virus: 15 minutes

Choose the operation you want to perform:
- NEW - Create a new policy
- EDIT - Edit an existing policy
- PRINT - Print all policies
- FILTERS - Edit content filters
- CLUSTERSET - Set how Incoming Mail Policies are configured in a cluster
- CLUSTERSHOW - Display how Incoming Mail Policies are configured in a cluster
[]> filters

Defined filters:
1. example_filter_one
2. example_filter_two

Choose the operation you want to perform:
- NEW - Create a new filter
- EDIT - Edit an existing filter
- DELETE - Delete a filter
- PRINT - Print all filters
- MOVE - Reorder a filter
- RENAME - Rename a filter

檢查過濾器。如果需要，對傳出內容過濾器重複上述操作。

郵件過濾器

通過GUI

不可用。

通過CLI

> filters

Choose the operation you want to perform:
- NEW - Create a new filter.
- DELETE - Remove a filter.
- IMPORT - Import a filter script from a file.
- EXPORT - Export filters to a file
- MOVE - Move a filter to a different position.
- SET - Set a filter attribute.
- LIST - List the filters.
- DETAIL - Get detailed information on the filters.
- LOGCONFIG - Configure log subscriptions used by filters.
- ROLLOVERNOW - Roll over a filter log file.
- CLUSTERSET - Set how filters are configured in a cluster.
- CLUSTERSHOW - Display how filters are configured in a cluster.
[]> list

Num Active Valid Name
1 Y Y example_message_filter

檢查過濾器。

相關資訊

• 思科安全電子郵件網關最終使用手冊
• 思科安全電子郵件網關版本說明
• 技術支援與文件 - Cisco Systems