'DoD detected!' prohibits mailprocessing

[Hartmut Goebel]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Hi,

on one of the systems I'm in charage off, I get 'Denial Of Service 
detected!' messages in the mail-log. Unfortunatly this seams to prohibit 
all otehr MailScanning.

How can I find out, what the reason for this DoD is?

I already increased the "Virus Scanning Timeout" to 10 Minutes, but this 
does not help. I also radically reduced 'Max Unsafe' and 'Max Unscanned 
Bytes per Scan'. No change, except of smaller batches.

For me it does not look like MailScanner is scanning other messages 
then. But I'm not sure. There is no log-entry about this, neither about 
the files causing the DoD. MailScanner just says 'Scanner timed out' and 
'Denial Of Service detected!', but nothing about new batches. When I 
look at 'ps ax', I see that the Virus Scanner is started again (new 
process ID), but nothing happens.

How can I find out what happens here?
How can I make MailScanner scan and deliver other messages, esp. the 
small ones first?

Thanks in advance for any help!

-- 
Schönen Gruß - Regards
Hartmut Goebel

| Hartmut Goebel             | IT-Security -- effizient |
| h.goebel at goebel-consult.de | www.goebel-consult.de    |

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!