amavisd-new processes growing

This is a discussion on amavisd-new processes growing within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; Lately, my amavisd process have been growing to over 650M each. Given the oppourtunity the processes eat up all the ...


Go Back   Usenet Forums > Anti-Spam and Anti-Virus Related Forums > Amavis User

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-31-2005
swoolley@adstelecom.com
 
Posts: n/a
Default amavisd-new processes growing

Lately, my amavisd process have been growing to over 650M each. Given
the oppourtunity the processes eat up all the avilable ressources on my
server. I have been using amavisd-nanny to clean things up but I would
rather fix the problem. I read on the amavisd-new web site that this is
probably the result of...

"Because amavisd-new tries to recursively unpack and decode each mail
as deeply as possible, this may be abused by malware. The so-called
mail bomb, e.g. 42.zip or bzip2 bomb are examples of such malware. Such
mail message, when fully decoded, can exceed available disk size
several times, or consume a lot of time for decoding. Unless decoding
is stopped at an earlier stage, it could cause the message checking to
be retried over and over again, each time either hitting the disk full
condition, or exceeding the allowed time limit. Note that mail bombs
are targeting mail content filters, and are normally not a threat to
mail clients (MUA), unless they carry a virus as well"

I made the following adjustments in my amavisd.conf:

$MAXLEVELS = 14;
$MAXFILES = 1500;
$MIN_EXPANSION_QUOTA = 100*1024;
$MAX_EXPANSION_QUOTA = 300*1024*1024;

But that does not seem to have a controlling effect.


Any ideas?

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 04:13 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0