Orphaned processing directory

[Julian Field]

Jim Holland wrote:
> Hi
> 
> On Wed, 26 Jul 2006, Hancock, Scott wrote:
> 
>> I have a directory containing 60 files in /var/spool/MailScanner/input
>>
>> The directory is 6 days old at this point.
>>
>> How can I tell MailScanner to process these files?  
>>
>> Or can I assume these files have already been processed and the
>> directory clean up was missed?
>>
>> I see in the mail log the incoming event but not the delivery.  I think
>> exim would tag another msg ID after MailScanner processing anyway?
> 
> I note that the number of messages is a multiple of the default number of
> messages per batch (30). Are you sure that this isn't a case of a Denial
> of Service attack?  ie the virus scanner has timed out on one of the
> messages so refuses to process the remainder in each batch.  You should 
> see an entry:
> 
> 	Virus Scanning: Denial Of Service attack detected!
> 
> in the log.
> 
> The solution is to upgrade to the latest version of MailScanner (see my 
> posting earlier today).

The whole batch will still be processed even if there is a denial of 
service attack. I designed it to cope with DoS attacks, even back in 
version 1 (back in 2000). The only bit that worries me is the time taken 
to recover from it, which is double what I would expect.

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.