On Sunday, August 10, 2003, at 10:14 AM, Jeff Wasilko wrote:
If you're using demime to front-end majordomo, you should patch
it to deal with a problem that was recently discovered.

A spammer is sending out spam that claims to be text/html with a
base64 attachment. However, there is no attachment. This causes
the base64 decoder in demime to go into a loop. In my case, the
demime processes grew to multi-hundred-meg and up to a gigabyte,
while sendmail filled /var/spool/mqueue with the error messages
that demime was emitting.

Thank you, thank you, thank you for posting that. I got up this morning and found my mail system moribund due to syslog filling up /var with error messages, and the load average pegged. I figured out that demime was choking, but could not find the bug, and was reduced to killing and dequeuing stuff and trying to figure out some way (maybe a milter) to exclude null encoded MIME bodies.


--
Michael C. Berch
[EMAIL PROTECTED] / [EMAIL PROTECTED]



Reply via email to