"Virus Scanners=" --> DOS-attack

[shrek-m at gmx.de]

Julian Field wrote:

> It's hardly a DoS attack, it's a case of me not checking the
> configuration
> well enough. DoS attacks are generally attacks coming from outside. There
> are a million packages that don't work well if you configure them wrong.
> Setting up software wrong is not an "attack" of any sort, it's a screw-up
> by the admin.
>
> Anyway, the patch to add more checking is this:
>
> --- SweepViruses.pm.old    2003-09-04 15:50:05.000000000 +0100
> +++ SweepViruses.pm     2003-09-05 10:16:54.000000000 +0100
> @@ -573,6 +571,7 @@
>
>    $scannerlist = MailScanner::Config::Value('virusscanners');
>    $scannerlist =~ tr/,//d;
> +  $scannerlist = "none" unless $scannerlist; # Catch empty setting
>    @scanners = split(" ", $scannerlist);
>    $counter = 0;


thanks, solved.


# pwd
/usr/lib/MailScanner/MailScanner

# diff -Naur SweepViruses.pm.old SweepViruses.pm
--- SweepViruses.pm.old 2003-09-05 11:37:14.000000000 +0200
+++ SweepViruses.pm     2003-09-05 12:32:31.000000000 +0200
@@ -538,6 +538,7 @@

   $scannerlist = MailScanner::Config::Value('virusscanners');
   $scannerlist =~ tr/,//d;
+  $scannerlist = "none" unless $scannerlist; # Catch empty setting
   @scanners = split(" ", $scannerlist);
   $counter = 0;



> At 10:01 05/09/2003, you wrote:
>
>> [...] If you wish to receive a copy of the *infected* attachment, please
>> e-mail helpdesk and include the whole of this message
>> in your request. Alternatively, you can call them, with
>> the contents of this message to hand when you call.
>>
>> At Fri Sep  5 10:05:02 2003 the virus scanner said:
>>   Denial of Service attack in message!
>

no  "DOS attack"  with misconfigured  "Virus Scanners="    ;-)

>>
>>
>> Note to Help Desk: Look on the MailScanner in
>> /var/spool/MailScanner/quaran=
>> tine/20030905 (message h85852wQ002545).
>> --=20
>> Postmaster
>> Mailscanner thanks transtec Computers for their support
>>
>> </snip-mbox>
>

--
shrek-m