Re: [Exim] Limiting headers

Hello,
Sorry to bore you again.


Suresh Ramasubramanian wrote:
> See, there are two reasons for headers getting that large -
>
> 1. A mail loop of some kind
> 2. An attempted buffer overflow exploit (like a HELO of > 1024 characters)
>


Yesterday I configured (accidentally) a mail-loop between two mailservers.
I found this in the exim_mainlog:
2001-09-25 09:03:50 15lrsM-0003du-00 ** Too many "Received" headers - suspected mail loop
2001-09-25 09:04:09 15lrsf-0003eV-00 ** Too many "Received" headers - suspected mail loop
2001-09-25 09:04:27 15lrsx-0003f2-00 ** Too many "Received" headers - suspected mail loop
2001-09-25 09:24:32 15lsCO-0003i0-00 ** Too many "Received" headers - suspected mail loop

Thats a pleasant feature, I think.


The compile-time option discussed here looks like this:
HEADER_MAXSIZE="(1024*1024)"

1024 * 1024 = 1048576

Nice,
but how should I interpret this ?

Tamas TEVESZ wrote:
> received_headers_max is not the _size_ but the _number_ of headers

But in which period ??
One second; one hour; one day ???


oliver