DoS lack of logs

shuttlebox shuttlebox at gmail.com
Mon Oct 16 10:08:36 IST 2006


On 10/9/06, Jim Holland <mailscanner at mango.zw> wrote:
> I am pretty sure that this is only a problem on older versions of
> MailScanner and that if you update to the current version the problem will
> disappear.  Not only does the current version minimise the chances of a
> denial of service problem occurring, but if it does occur it will also
> report more helpfully:
>
>         Virus Scanning: Denial Of Service attack is in message k7GDK0Nb020871
>
> so that you know where the problem is.  The problem message will then be
> quarantined so that it can be dealt with manually if required and the rest
> of the system will carry on without interference.

I'm now running 4.56.8 and I don't get the above (crystal clear) log
message, instead I get the old: Virus Scanning: Denial Of Service
attack detected!

There's no sign of it getting quarantined either, maybe it is but I
can't tell from the logs. Every time I get a DoS attempt I want to
check out the message because it's often legit mail causing it. A
message like this would be helpful:

Virus Scanning: Denial Of Service attack is in message k7GDK0Nb020871.
Message quarantined.

Then you know what happened to which message.

-- 
/peter


More information about the MailScanner mailing list