Suresh Ramasubramanian wrote: > See, there are two reasons for headers getting that large -
>
> 1. A mail loop of some kind
> 2. An attempted buffer overflow exploit (like a HELO of > 1024 characters)
>
Yesterday I configured (accidentally) a mail-loop between two mailservers.
I found this in the exim_mainlog:
2001-09-25 09:03:50 15lrsM-0003du-00 ** Too many "Received" headers - suspected mail loop
2001-09-25 09:04:09 15lrsf-0003eV-00 ** Too many "Received" headers - suspected mail loop
2001-09-25 09:04:27 15lrsx-0003f2-00 ** Too many "Received" headers - suspected mail loop
2001-09-25 09:24:32 15lsCO-0003i0-00 ** Too many "Received" headers - suspected mail loop
Thats a pleasant feature, I think.
The compile-time option discussed here looks like this:
HEADER_MAXSIZE="(1024*1024)"
1024 * 1024 = 1048576
Nice,
but how should I interpret this ?
Tamas TEVESZ wrote: > received_headers_max is not the _size_ but the _number_ of headers
But in which period ??
One second; one hour; one day ???
