email tagged as Denial of Service but not being saved
mailscanner at ecs.soton.ac.uk
Fri Nov 1 20:56:55 GMT 2002
Thanks for reporting that. It is now detecting and handling this correctly.
At 19:54 01/11/2002, you wrote:
>I upgraded from Mailscanner 1.x to 4.03-1 three days ago.
>The new version(4.03-1) is working great as far as I can
>tell with the exception of one thing.
>The issue is that over the past three days I have seen four "Denial of
>Service" messages logged to syslog but no attachments or body messages are
>The user does get an email that says "look here" with the correct message
>ID as I would expect but the message(and message ID
>directory) are never created in the quarantine area. Postmaster also
>does not get any email regarding the DoS message. Syslog normally would
>show "Saved entire message" or "Saved infected "filename"" but nothing
>shows in syslog
>other than "Denial of Service attack in in message gXXXXXXXXXXX."
>I need to allow the end user the option of at least seeing the
>quarantined data even if it is a broken or does not contain a properly
>Has anyone seen this problem before? From what I can tell, all virus
>infected files ARE being saved and logged properly. I have increased the
>timeout TNEF timeout in hope that it will help in some fashion
>even though it has nothing to do with creating quarantined directories
>and email postmaster of a DoS message.
>I just put 4.04-1 earlier today. I haven't seen any new DoS messages
>be tagged yet.
>Is there any way to prevent MailScanner from catching "external body"
>messages and tagging them? I have seen a couple of other posts on
>the subject but nothing concrete on being a future release option.
>AIX 5.1-002, Perl 5.6.0, TNEF=internal, Mcafee, TNEF Timeout = 120,
>Scanner Timeout=300,Quarantine Infections = yes, Quarantine Whole Message
>Thanks in advance,
Julian Field Teaching Systems Manager
jkf at ecs.soton.ac.uk Dept. of Electronics & Computer Science
Tel. 023 8059 2817 University of Southampton
Southampton SO17 1BJ
More information about the MailScanner