<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=white lang=EN-GB link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I get the exact same thing, also running under a vm after I upgraded a few months ago.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>You can find the emails in question, the path is wrong but they are under /var/spool/MailScanner/quarantine/<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I've not yet hunted down where the timeout is to try raising it, although by forwarding one of the deleted emails I had it get deleted once, and get through once so it doesnt seem reliable.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>my server is fairly low power (3x atom cores for this vm), but low usage (handful of domains for friends and family), so I'd thought it may be something to do with that.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'> MailScanner [mailto:mailscanner-bounces+mailscanner=z00b.com@lists.mailscanner.info] <b>On Behalf Of </b>Steven Jardine<br><b>Sent:</b> 07 March 2016 18:02<br><b>To:</b> MailScanner Discussion<br><b>Subject:</b> Re: Denial Of Service Attack Messages<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>What would cause a timeout? My system is fairly new. I would like to determine the reason for the problem rather than just disable the scan. Any ideas?<br><br>On 03/07/2016 10:57 AM, Jerry Benton wrote:<br><br><o:p></o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'>This happens when the scanner times out. You can disable Dangerous Content scanning to eliminate the error.<o:p></o:p></p><div><p class=MsoNormal>-<o:p></o:p></p></div><div><p class=MsoNormal>Jerry Benton<o:p></o:p></p></div><div><p class=MsoNormal><a href="http://www.mailborder.com">www.mailborder.com</a><o:p></o:p></p></div><p class=MsoNormal>Sent from my iPhone<o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><br>On Mar 7, 2016, at 12:21, Steven Jardine <<a href="mailto:steve@mjnservices.com">steve@mjnservices.com</a>> wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal style='margin-bottom:12.0pt'>Yes. I recently upgraded to 4.86.1-1 and the install log shows:<br><br>HTML::Parser => OK<br><br><o:p></o:p></p><div><p class=MsoNormal>On 03/07/2016 10:19 AM, Jerry Benton wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal style='margin-bottom:12.0pt'>is the HTML parser installed?<o:p></o:p></p><div><p class=MsoNormal>-<o:p></o:p></p></div><div><p class=MsoNormal>Jerry Benton<o:p></o:p></p></div><div><p class=MsoNormal><a href="http://www.mailborder.com">www.mailborder.com</a><o:p></o:p></p></div><p class=MsoNormal>Sent from my iPhone<o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><br>On Mar 7, 2016, at 11:25, Steven Jardine <<a href="mailto:steve@mjnservices.com">steve@mjnservices.com</a>> wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p style='margin-bottom:12.0pt;line-height:18.65pt;background:white;box-sizing: border-box;color:rgb(51, 51,
51);orphans: auto;text-align:start;widows: 1;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-size:10.5pt;font-family:"Helvetica","sans-serif"'>I upgraded MailScanner several months ago to v4.85.2-3 and now v4.86.1-1. Often I am getting the error message:<o:p></o:p></span></p><blockquote style='border:none;border-left:solid #DDDDDD 3.0pt;padding:0cm 0cm 0cm 11.0pt;margin-left:0cm;margin-right:0cm;margin-bottom:12.0pt;box-sizing: border-box;color:rgb(119, 119,
119);orphans: auto;text-align:start;widows: 1;-webkit-text-stroke-width: 0px;word-spacing:0px'><p style='margin:0cm;margin-bottom:.0001pt;line-height:18.65pt;background:white;box-sizing: border-box'><span style='font-size:10.5pt;font-family:"Helvetica","sans-serif"'>MailScanner was attacked by a Denial Of Service attack, and has therefore deleted this part of the message. Please contact your e-mail providers for more information if you need it, giving them the whole of this report. Attack in: /var/spool/MailScanner/incoming/20499/u27Em5eK000564/nmsg-20499-47.html<o:p></o:p></span></p></blockquote><p style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:0cm;line-height:18.65pt;background:white;box-sizing: border-box;orphans: auto;text-align:start;widows: 1;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-size:10.5pt;font-family:"Helvetica","sans-serif";color:#333333'>The file reported in the attack is not there so I am unable to to any troubleshooting.<o:p></o:p></span></p><p style='mso-margin-top-alt:0cm;margin-right:0cm;margin-bottom:12.0pt;margin-left:0cm;line-height:18.65pt;background:white;box-sizing: border-box;orphans: auto;text-align:start;widows: 1;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-size:10.5pt;font-family:"Helvetica","sans-serif";color:#333333'>I am using a OpenVZ container with Ubuntu 14.04 - 6 CPUs and 12GB RAM. The messages are causing problems with valid mail messages both incoming and outgoing.<o:p></o:p></span></p><p style='margin-top:0cm;line-height:18.65pt;background:white;box-sizing: border-box;orphans: auto;text-align:start;widows: 1;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-size:10.5pt;font-family:"Helvetica","sans-serif";color:#333333'>Is there a way to disable this feature? Any ideas on how to suppress these messages?<o:p></o:p></span></p><p style='margin-top:0cm;line-height:18.65pt;background:white;box-sizing: border-box;orphans: auto;text-align:start;widows: 1;-webkit-text-stroke-width: 0px;word-spacing:0px'><span style='font-size:10.5pt;font-family:"Helvetica","sans-serif";color:#333333'><br>Thanks!<br>Steve<o:p></o:p></span></p><div><p class=MsoNormal><b><span style='font-size:8.0pt;color:gray'>IMPORTANT:</span></b><span style='font-size:8.0pt;color:gray'> This email does not constitute a contract or an offer or acceptance of an offer to enter into a contract. Further, this email may not be used to modify, supplement, novate, or waive any rights with respect to an existing contract or other binding commercial terms.<o:p></o:p></span></p></div></div></blockquote><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal style='margin-bottom:12.0pt'><br><br>-- <br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/listinfo/mailscanner">http://lists.mailscanner.info/listinfo/mailscanner</a><o:p></o:p></p></div></blockquote><p class=MsoNormal><br><br><o:p></o:p></p></blockquote><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><b><span style='font-size:8.0pt;color:gray'>IMPORTANT:</span></b><span style='font-size:8.0pt;color:gray'> This email does not constitute a contract or an offer or acceptance of an offer to enter into a contract. Further, this email may not be used to modify, supplement, novate, or waive any rights with respect to an existing contract or other binding commercial terms.<o:p></o:p></span></p></div></div></blockquote><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal style='margin-bottom:12.0pt'><br><br>-- <br>MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br><a href="http://lists.mailscanner.info/listinfo/mailscanner">http://lists.mailscanner.info/listinfo/mailscanner</a><o:p></o:p></p></div></blockquote><p class=MsoNormal><br><br><br><o:p></o:p></p><pre><o:p> </o:p></pre><pre><o:p> </o:p></pre><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><b><span style='font-size:8.0pt;color:gray'>IMPORTANT:</span></b><span style='font-size:8.0pt;color:gray'> This email does not constitute a contract or an offer or acceptance of an offer to enter into a contract. Further, this email may not be used to modify, supplement, novate, or waive any rights with respect to an existing contract or other binding commercial terms.<o:p></o:p></span></p></div></div></body></html>