DoS lack of logs
shuttlebox
shuttlebox at gmail.com
Mon Oct 16 10:08:36 IST 2006
On 10/9/06, Jim Holland <mailscanner at mango.zw> wrote:
> I am pretty sure that this is only a problem on older versions of
> MailScanner and that if you update to the current version the problem will
> disappear. Not only does the current version minimise the chances of a
> denial of service problem occurring, but if it does occur it will also
> report more helpfully:
>
> Virus Scanning: Denial Of Service attack is in message k7GDK0Nb020871
>
> so that you know where the problem is. The problem message will then be
> quarantined so that it can be dealt with manually if required and the rest
> of the system will carry on without interference.
I'm now running 4.56.8 and I don't get the above (crystal clear) log
message, instead I get the old: Virus Scanning: Denial Of Service
attack detected!
There's no sign of it getting quarantined either, maybe it is but I
can't tell from the logs. Every time I get a DoS attempt I want to
check out the message because it's often legit mail causing it. A
message like this would be helpful:
Virus Scanning: Denial Of Service attack is in message k7GDK0Nb020871.
Message quarantined.
Then you know what happened to which message.
--
/peter
More information about the MailScanner
mailing list