Files hidden in very deeply nested archive in ###

[paddy]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

On Fri, Nov 26, 2004 at 10:19:03AM -0200, Dennis Robert Kelbert wrote:
> What this what to say?
> ----------->  Files hidden in very deeply nested archive in NUMBER
> I´m trying to find some help reading for errors in google and MailScanner but i find nothing...

Mailscanner unpacks MIME, zips, etc recursively up to a limit, after
which it logs this error.  The number is the message id, it is
useful for cross-referencing this logging with other logging
related to the same message and for finding information (like
copies in quarantine, or still queued) that has been filed by
the message id. 

The limit is configurable in the parameter
'Maximum Archive Depth' found in /etc/MaliScanner/MailScanner.conf.

I would imagine the limit exists both to see off attacks, and
because it tends to indicate stuff you don't want.  I've an idea
that zip bombs have been seen in the wild before.

Regards,
Paddy
-- 
Perl 6 will give you the big knob. -- Larry Wall

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!