MailScanner was attacked by DOS and deletes message body

[Yu Wang]

Mark,

It appears MailScanner either didn't save it or something caused the message to be removed. I cannot find it anywhere under /var/spool/MailScanner/. 

I updated MailScanner last night to 5.1.3-2 and patched perl scripts for the ignore denial of service workaround. Hopefully it will fix the message body deletion issue.

Thanks.

James

-----Original Message-----
From: MailScanner <mailscanner-bounces+yuwang=cs.fsu.edu at lists.mailscanner.info> On Behalf Of Mark Sapiro
Sent: Tuesday, April 9, 2019 1:01 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: MailScanner was attacked by DOS and deletes message body

On 4/9/19 9:25 AM, Yu Wang wrote:
> 
> MailScanner was attacked by a Denial Of Service attack, and has 
> therefore deleted this part of the message. Please contact your e-mail 
> providers for more information if you need it, giving them the whole 
> of this report. Attack in:
> /var/spool/MailScanner/incoming/141905/1841B12012B.A4390/nmsg-141905-2
> 0.html
> 
> There was no directory /var/spool/MailScanner/incoming/141905/ on the 
> server (about 5 hours later). I searched ‘1841B12012B.A4390’ under 
> /var/spool/MailScanner and /var/spool/postfix/ and found nothing.


If MailScanner saved the message, it would be in /var/spool/MailScanner/quarantine/20190408/1841B12012B.A4390/message or possibly /var/spool/MailScanner/quarantine/20190408/spam/1841B12012B.A4390.
'20190408' is the date.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan


--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner