Solution:

Let Imail call declude.exe under another user than smtpd with the
'start' command, or let declude do that with the virusscanner.

Then set a quota on the user in in question, then smtpd can still
send/receive e-mails even when the virusscanner fills the quota. Then
the problem is limited to that one e-mail not being delivered, but who
wants to receive a large file full of zeroes?

I implemented this about a month ago and I can send those files all I
want without problems.

-- 
Regards,

Terrence Koeman

Technical Director/Administrator
MediaMonks B.V. (www.mediamonks.nl)

Please quote all replies in correspondence. 

- -----Original Message-----
- From: [EMAIL PROTECTED] 
- [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
- Sent: Tuesday, February 26, 2002 03:26
- To: [EMAIL PROTECTED]
- Subject: Re: [Declude.Virus] FW: Anti Virus Mailscanners DOS
- 
- 
- 
- >Can you comment on this Scott? Any danger here?
- 
- The decompression of archived files is handled by the AV 
- software, not 
- Declude.  Therefore, the potential for a problem here would 
- depend on the 
- AV software that you are using.  Unfortunately, I don't have any 
- information about how the various virus scanners handle this 
- situation.
- 
- If the AV software is properly designed, in the worst case, it should 
- handle the situation gracefully (immediately deleting any 
- files it creates 
- as soon as disk space is used up).  If this happens, the disk 
- space will be 
- used only temporarily.  This could potentially allow the one 
- E-mail to be 
- delivered, even if there was a virus in a separate 
- attachment.  However, 
- that would either require that the recipient open an 
- attachment when there 
- were two or more attachments present, which would likely be a 
- "red flag" 
- for most users (why would they be sent this second file that 
- they don't need?).
- 
- This should not create a DoS situation.  The hard drive 
- should only be full 
- for a fraction of a second (if at all), which should only cause minor 
- inconveniences (IE one incoming E-mail might get re-routed 
- through a backup 
- server, or a user retrieving their mail may get a temporary 
- error message 
- but get their mail when re-trying it).
-                             -Scott
- 
- ---
- [This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.Virus".  You can E-mail [EMAIL PROTECTED] for assistance.
You can visit our web site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to