RE: [Declude.Virus] Limit Size of message to be scanned?

[Andy Schmidt]

How do you prevent DoS attacks by someone sending a 405 MB attachment 100 times to a list of 10 cc's over a weekend, when it's likely not to be read? Best Regards Andy Schmidt Phone:  +1 201 934-3414 x20 (Business) Fax:    +1 201 934-9206   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Friday, July 08, 2005 03:19 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Limit Size of message to be scanned? have had one with 405 MB last week. The entire Declude system has scanned and checked it (it was hold due to several suspicious files in the archive). Only the _vbscript_ that should move the hold message file has created some problems +800 MB of memory usage and some read-errors in the declude logfile. Some further messages was not scanned.   Markus   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, July 08, 2005 9:05 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] Limit Size of message to be scanned? 50 MB e-mail attachments?   Youch!   John T eServices For You   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Thursday, July 07, 2005 8:36 PM To: Declude.Virus@declude.com Subject: [Declude.Virus] Limit Size of message to be scanned?   Hello All,   Is there a way to limit the size of the message that Declude/F-Prot can scan?  We have some customers that are sending 50+ meg files and it is causing our servers to have major issues.  Is there a setting to say skip anything over a certain size?  Either in F-Prot or Declude?   We fixed it currently by setting it to OFF for certain domains, but really want to ban extensions and vulnerabilities for those domains….     Thanks, Grant Griffith EI8HTLEGS, A Division of ETC (812)932-1000