Orphaned processing directory

Julian Field mailscanner at ecs.soton.ac.uk
Wed Jul 26 18:29:02 IST 2006



Jim Holland wrote:
> Hi
> 
> On Wed, 26 Jul 2006, Hancock, Scott wrote:
> 
>> I have a directory containing 60 files in /var/spool/MailScanner/input
>>
>> The directory is 6 days old at this point.
>>
>> How can I tell MailScanner to process these files?  
>>
>> Or can I assume these files have already been processed and the
>> directory clean up was missed?
>>
>> I see in the mail log the incoming event but not the delivery.  I think
>> exim would tag another msg ID after MailScanner processing anyway?
> 
> I note that the number of messages is a multiple of the default number of
> messages per batch (30). Are you sure that this isn't a case of a Denial
> of Service attack?  ie the virus scanner has timed out on one of the
> messages so refuses to process the remainder in each batch.  You should 
> see an entry:
> 
> 	Virus Scanning: Denial Of Service attack detected!
> 
> in the log.
> 
> The solution is to upgrade to the latest version of MailScanner (see my 
> posting earlier today).

The whole batch will still be processed even if there is a denial of 
service attack. I designed it to cope with DoS attacks, even back in 
version 1 (back in 2000). The only bit that worries me is the time taken 
to recover from it, which is double what I would expect.

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.



More information about the MailScanner mailing list