Denial Of Service Attack Messages

Thu May 5 09:05:59 UTC 2016

Correct, Mail::ClamAV is obsolete, and should no longer be used.

As it involved loading a per-child copy of the ClamAV patterns on each reload of every MailScanner child, it was a real resource hog.

Cheers,

Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford | HR2 6JT
Tel : 01432 260415 |Email: phil.randal at hoopleltd.co.uk<mailto:phil.randal at hoopleltd.co.uk>
General email: enquiries at hoopleltd.co.uk<mailto:enquiries at hoopleltd.co.uk>
Website: www.hoopleltd.co.uk<http://www.hoopleltd.co.uk/>

From: MailScanner [mailto:mailscanner-bounces+phil.randal=hoopleltd.co.uk at lists.mailscanner.info] On Behalf Of Steven Jardine
Sent: 04 May 2016 20:54
To: MailScanner Discussion
Subject: Re: Denial Of Service Attack Messages

Would this missing module cause the DOS error message?  My research seems to indicate that it is old and shouldn't be used with ClamAV.  Is this correct?

On 05/04/2016 10:10 AM, Steven Jardine wrote:
OK.  So this script gives the warning: "WARNING: Mail::ClamAV => Missing".  The problem is that when I try and install Mail::ClamAV it gives me the error "The clamav version you are using is too old. Please upgrade to at least 0.95.1" but my clamav version is 0.98.7.

On 05/04/2016 09:57 AM, Jerry Benton wrote:

get the new ms-check-perl from the v5 branch on github
-
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
Sent from my iPhone

On May 4, 2016, at 11:50, Steven Jardine <steve at mjnservices.com<mailto:steve at mjnservices.com>> wrote:
Do you know which perl modules?  When I run your check_modules.sh script all report OK and I still have the problem.
On 05/04/2016 09:47 AM, Jerry Benton wrote:
I have only seen this error on systems missing perl modules.
-
Jerry Benton
www.mailborder.com<http://www.mailborder.com>
Sent from my iPhone

On May 4, 2016, at 11:43, Steven Jardine <steve at mjnservices.com<mailto:steve at mjnservices.com>> wrote:
Does MailScanner v5 have any fixes for this issue?  Has the problem been identified?  I would really like to re-enable Dangerous Content scanning.

Thanks!
Steve
On 03/14/2016 06:10 AM, Andrew Southgate wrote:
well.. thats somewhat fitting...

A second attempt at what I was trying to say:

but an HTML tag disarm shouldnt replace the contents of the email with "MailScanner was attacked by a Denial Of Service attack..." should it ?

From: MailScanner [mailto:mailscanner-bounces+andy=z00b.com at lists.mailscanner.info] On Behalf Of Andrew Southgate
Sent: 14 March 2016 12:07
To: 'MailScanner Discussion'
Subject: RE: Denial Of Service Attack Messages

MailScanner was attacked by a Denial Of Service attack, and has therefore deleted this part of the message. Please contact your e-mail providers for more information if you need it, giving them the whole of this report. Attack in: /var/spool/MailScanner/incoming/17065/176F782B1073.AABFC/nmsg-17065-12.html

IMPORTANT: This email does not constitute a contract or an offer of acceptance of an offer to enter into a contract. Further, this email may not be used to modify, supplement, novate, or waive any rights with respect to an existing contract or other binding commercial terms. MJN Services, Inc. conducts business under our service terms and conditions found at www.mjnservices.com<http://www.mjnservices.com> unless otherwise agreed to in writing by an officer of MJN Services, Inc.

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/listinfo/mailscanner

IMPORTANT: This email does not constitute a contract or an offer of acceptance of an offer to enter into a contract. Further, this email may not be used to modify, supplement, novate, or waive any rights with respect to an existing contract or other binding commercial terms. MJN Services, Inc. conducts business under our service terms and conditions found at www.mjnservices.com<http://www.mjnservices.com> unless otherwise agreed to in writing by an officer of MJN Services, Inc.

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/listinfo/mailscanner

IMPORTANT: This email does not constitute a contract or an offer of acceptance of an offer to enter into a contract. Further, this email may not be used to modify, supplement, novate, or waive any rights with respect to an existing contract or other binding commercial terms. MJN Services, Inc. conducts business under our service terms and conditions found at www.mjnservices.com<http://www.mjnservices.com> unless otherwise agreed to in writing by an officer of MJN Services, Inc.

IMPORTANT: This email does not constitute a contract or an offer of acceptance of an offer to enter into a contract. Further, this email may not be used to modify, supplement, novate, or waive any rights with respect to an existing contract or other binding commercial terms. MJN Services, Inc. conducts business under our service terms and conditions found at www.mjnservices.com<http://www.mjnservices.com> unless otherwise agreed to in writing by an officer of MJN Services, Inc.
Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

"Any opinion expressed in this e-mail or any attached files are those of the individual and not necessarily those of Hoople Ltd. You should be aware that Hoople Ltd. monitors its email service. This e-mail and any attached files are confidential and intended solely for the use of the addressee. This communication may contain material protected by law from being passed on. If you are not the intended recipient and have received this e-mail in error, you are advised that any use, dissemination, forwarding, printing or copying of this e-mail is strictly prohibited. If you have received this e-mail in error please contact the sender immediately and destroy all copies of it."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20160505/e7b2c384/attachment.html>