Autor: Matt Data: A: exim Assumpte: Re: [exim] Emergency!!! Is anyone else getting this virus/worm?
Giuliano Gavazzi wrote:
> >A message is received, passed to the scanning engine and the next thing
> >you realize is there is a /var/spool/exim/scan/MSG-ID/ and inside it
> >there are files growing by the second, into GigaBytes of data!!
> >And filling disk space... in a few minutes you run out of disk!!!
> >
> >How to detect/stop it?
>
> come on, don't be tragicomic. Haven't you got a limit to the message
> size? And if you have, I would say your virus is Exiscan+Clamav
> itself!
> Besides, today disks are so cheap, why don't you just add some more...
ClamAV has options for limiting the decompression thresholds. Sounds like
you've been tweaking without reading :)
