Over the last few days, the majority (about 98%) of entries in our
Virus log look like this:
11/18/2003 04:10:10 Qeff80ed6013007fe 50 is too many MIME levels to recurse
11/18/2003 04:10:10 Qeff80ed6013007fe 50 is too many MIME levels to recurse
11/18/2003 04:10:10 Qeff80ed6013007fe 50 is too many MIME levels to recurse
Could it be true that 98%+ of our inbound traffic has too many mime
levels?
We're running Declude PRO 1.76i9, F-Prot 3.14b under W2k3 Server, web
edition.
Any ideas?
Most likely, you have one rogue spammer causing that. You'll see one such
entry for each new recursed MIME segment -- and if they have 50 already,
they could easily have 100 or more.
What I would do is check the IMail and Declude log files to see who the
E-mail was sent from/to, and whether or not it was blocked for any
reason. If it was blocked, you can send us the D*.SMD file, and we can
analyze it.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
