Re: [exim] Emergency!!! Is anyone else getting this virus/wo…

Top Page
Delete this message
Reply to this message
Author: patrick coeman
Date:  
To: exim-users, math
CC: 
Subject: Re: [exim] Emergency!!! Is anyone else getting this virus/worm?
Some people are just renting a server by a ISP. Renting a server with a
20 or 40GB HD is indeed cheap, asking for the same machine with a 250GB
makes renting double or triple. Why, I don't know. The hardware isn't
that expencive. I think ISP"s are counting that you are planning to put
a few 1000 sites on that machine.

And about the attachment: Just make a few 100MB or GB file with only the
letter a in it and let some zip program use the max compression. Indeed
you receive a very small attachment. We played with that in pre-internet
times (Fidonet) to test mailsoftware.

Giuliano Gavazzi wrote:

> At 10:56 am +0300 2004/11/13, Odhiambo G. Washington wrote:
>
>> I seem to have landed a new virus that is unstoppable using
>> Exiscan+Clamav!!
>>
>> A message is received, passed to the scanning engine and the next thing
>> you realize is there is a /var/spool/exim/scan/MSG-ID/ and inside it
>> there are files growing by the second, into GigaBytes of data!!
>> And filling disk space... in a few minutes you run out of disk!!!
>>
>> How to detect/stop it?
>
>
> come on, don't be tragicomic. Haven't you got a limit to the message
> size? And if you have, I would say your virus is Exiscan+Clamav itself!
> Besides, today disks are so cheap, why don't you just add some more...
>
> g
>


--
Webmaster
webmaster@???
www.antifa.net