On Sunday, August 10, 2003, at 10:14 AM, Jeff Wasilko wrote:
> If you're using demime to front-end majordomo, you should patch
> it to deal with a problem that was recently discovered.
>
> A spammer is sending out spam that claims to be text/html with a
> base64 attachment. However, there is no attachment. This causes
> the base64 decoder in demime to go into a loop. In my case, the
> demime processes grew to multi-hundred-meg and up to a gigabyte,
> while sendmail filled /var/spool/mqueue with the error messages
> that demime was emitting.
Thank you, thank you, thank you for posting that. I got up this
morning and found my mail system moribund due to syslog filling up /var
with error messages, and the load average pegged. I figured out that
demime was choking, but could not find the bug, and was reduced to
killing and dequeuing stuff and trying to figure out some way (maybe a
milter) to exclude null encoded MIME bodies.
--
Michael C. Berch
mcb@postmodern.com / mcb@greatcircle.com
Follow-Ups:
References:
|
|
