On Thu, Dec 14, 2006 at 10:37:29AM -0500, jean-paul natola said:
> after cd into it I saw a HUGE message-
>
> rw-r----- 1 mailnull mail 7233975 Dec 14 10:10 1GusBk-0002SX-Ok-00000
> -rw-r----- 1 mailnull mail 270 Dec 14 10:10 1GusBk-0002SX-Ok-00001
> -rw-r----- 1 mailnull mail 7233422 Dec 14 10:10 1GusBk-0002SX-Ok-00002
> -rw-r----- 1 mailnull mail 135 Dec 14 10:10 1GusBk-0002SX-Ok-00003
> -rw-r----- 1 mailnull mail 1780193 Dec 14 10:10 1GusBk-0002SX-Ok-00004
> -rw-r----- 1 mailnull mail 53466 Dec 14 10:10 1GusBk-0002SX-Ok-00005
> -rw-r----- 1 mailnull mail 1264032 Dec 14 10:10 1GusBk-0002SX-Ok-00006
> -rw-r----- 1 mailnull mail 180 Dec 14 10:10 1GusBk-0002SX-Ok-00007
> -rw-r----- 1 mailnull mail 1640873 Dec 14 10:10 1GusBk-0002SX-Ok-00008
> -rw-r----- 1 mailnull mail 49692 Dec 14 10:10 1GusBk-0002SX-Ok-00009
> -rw-r----- 1 mailnull mail 1164678 Dec 14 10:10 1GusBk-0002SX-Ok-00010
> -rw-r----- 1 mailnull mail 225 Dec 14 10:10 1GusBk-0002SX-Ok-00011
> -rw-r----- 1 mailnull mail 1994156 Dec 14 10:10 1GusBk-0002SX-Ok-00012
> -rw-r----- 1 mailnull mail 53972 Dec 14 10:10 1GusBk-0002SX-Ok-00013
> -rw-r----- 1 mailnull mail 1421914 Dec 14 10:10 1GusBk-0002SX-Ok-00014
> -rw-r----- 1 mailnull mail 270 Dec 14 10:10 1GusBk-0002SX-Ok-00015
> -rw-r----- 1 mailnull mail 1812449 Dec 14 10:10 1GusBk-0002SX-Ok-00016
> -rw-r----- 1 mailnull mail 53133 Dec 14 10:10 1GusBk-0002SX-Ok-00017
> -rw-r----- 1 mailnull mail 1288245 Dec 14 10:10 1GusBk-0002SX-Ok-00018
> -rw-r----- 1 mailnull mail 3645 Dec 14 10:10 1GusBk-0002SX-Ok-00019
> -rw-r----- 1 mailnull mail 7235351 Dec 14 10:10 1GusBk-0002SX-Ok.eml
>
> and sure enough the next entry in my paniclog was
>
> 2006-12-14 10:12:53 1GusBk-0002SX-Ok malware acl condition: clamd: unable
> to read from socket (Operation timed out)
A) upgrade to 0.88.7, and set the mail-recursion to something lower than
the default.
B) Tell exim not to call clamav on large messages.
--
--------------------------------------------------------------------------
| Stephen Gran | It's so beautifully arranged on the |
| steve@??? | plate -- you know someone's fingers |
| http://www.lobefin.net/~steve | have been all over it. -- Julia Child |
| | on nouvelle cuisine. |
--------------------------------------------------------------------------
