Hi there, I discovered and annoying problem using qmail-scanner 1.14: Its built-in "timeout" protection doesn't work as expected.
Example: If you use qmail-scanner along with f-prot 3.12b, and feed it with a "mailbomb" in the form of a recusrsive zip file that f-prot will take forever to try decompressing (let's say the old, well-known 42.zip that you can get from http://mapage.noos.fr/arboi/42.zip ), then qmail-scanner will sit there forever while f-prot will "decompress" the file forever using 100% CPU, and no timeout will be detected. It's only if you manually kill the f-prot process after a long time that qmail-scanner will then say "Uh ! Timeout !". This is problematic, as this renders servers using qmail-scanner vulnerable to a DOS-attack just by sending it several mails with "42.zip" attached at the same time. Regards. -- Michel Bouissou <[EMAIL PROTECTED]> OpenPGP ID 0xDDE8AC6E ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
