<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font face="Tahoma">Mariano Absatz wrote:</font>
<blockquote cite="mid40E2A460.17166.1D9E9920@localhost" type="cite">
<pre wrap="">Hi,
I got again the same problem I described in <a class="moz-txt-link-freetext" href="http://tinyurl.com/228le">http://tinyurl.com/228le</a> but now
I could capture the message.
The culprit is an (apparently) innocent message that contains a corrupted zip
file. The big problem is that instead of detecting the zip file as corrupt
and do something (maybe we should have an option about what to do?),
MailScanner loops infinitely, eating CPU, and the message doesn't get
delivered nor deleted.
Julian, would you take a look at this when you have a moment, please?
INFO: MailScanner 4.29.7 with ZMailer 2.99.56 - Archive::Zip 1.10 - RedHat
(used with an old RHL6.1 and with Fedora Core 1). Verified with Perl 5.6.1
and 5.8.3.
Example corrupt zip file (don't know where it came from nor what it has, it
was in a message that triggered the problem):
<a class="moz-txt-link-freetext" href="http://baby.com.ar/MailScanner/err_zip/PSt422.zip">http://baby.com.ar/MailScanner/err_zip/PSt422.zip</a>
Would someone with an MTA other than ZMailer try to send this file thru a
MailScanner server and see what happens?
</pre>
</blockquote>
Postfix 2.1.1, MS 4.31.6, ClamAV & F-Prot (Latest) brought the box
to a stand still until I removed the queued file, top showed CPU just
about maxed out on a single MS instance (I let it running for 7 minutes
in case it was just a heavily compressed file). Definitely a problem...<br>
<br>
Drew<br>
</body>
<br />--
<br />In line with our <a href="http://www.themarshalls.co.uk/policy">policy</a>, this message has been scanned for
<br />viruses and dangerous content by
<a href="http://www.mailscanner.info/">MailScanner</a>, and is
<br />believed to be clean.
</html>
-------------------------- MailScanner list ----------------------<br>
To leave, send leave mailscanner to <a href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</a><br>
Before posting, please see the Most Asked Questions at<br>
<a href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</a> and the archives at<br>
<a href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</a><br>