> Source: [sk181885](https://support.checkpoint.com/results/sk/sk181885)

# sk181885 - "Timeout Error" and "Invalid URL" errors in Mail Transfer Agent (MTA) with Anti-Virus

| Property | Value |
|----------|-------|
| Solution ID | sk181885 |
| Date Created | 2024-01-15 |
| Last Modified | 2024-01-23 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- A SmartLog log with these details:  

Action: Detect  

Blade: Anti-Virus  

Forensics Details - Reason - Timeout Error  

Forensics Details - Resource - Invalid URL

For example:

![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1705239550314/Screenshot_12202401141618491.png)

## Cause

The UrlRepEngine encounters issues when it tries to verify URLs that are invalid or do not exist.  
The Mail Transfer Agent (MTA) typically scans these problematic URLs.  
The URLs could be in the header or the body of the email itself or in a file attached to the email.

**Example Scenario:**

* In the mtad logs, you see an entry similar to:  
  `UrlRepEngine::Query resource 'www.test.test.test.java:1234', request '{"context":.....}.`
  * These are Java class names.
* The URL parser incorrectly recognizes these strings as valid URLs, leading to an attempt to validate them.
* These queries are forwarded to rep.checkpoint.com for verification.
* The result is an "HTTP error 400" error that indicates a bad request because of an invalid URL format.

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content