MailScanner embarassment!

[Martin Sapsed]

Hello all,

I've had a rather embarassing Monday morning. I came in to find my /var
partition on my MailScanner box had filled up with log messages from a
misbehaving client. This somehow appears to have caused MailScanner to
think that a number of innocuous (mostly plain text) mail messages were
Denial of Service attacks!

What is it about an e-mail that triggers this description and is there
perhaps some additional error checking that could be added to prevent this
embarassment? Perhaps MailScanner could even check whether the filesystem
where the mqueue dirs live is full or almost full and shut itself (probably
and sendmail) down? I have recollections from a colleague that sendmail can
go bananas if /var/spool fills up - it probably ought to deal with this
itself anyway but...

Cheers,

Martin

--
Martin Sapsed                           To have no errors
Information Services                    Would be life without meaning
University of Wales, Bangor, LL57 2UX   No struggle, no joy.
Fax: +44 (0)1248 383826