On Mon, 2005-05-02 at 16:20, Rick Macdougall wrote: > Hi, > > I've captured a copy of an email that looks like it's causing clamav to > loop. > > It does it with both clamdscan and clamscan. (Version 0.84). > > Would the devs like a copy and if so, where should I send it.
Thank you for the sample which I have looked at. The email has several sizable zip files attached to each of which contains a number of word documents. Since each of the files MUST be individually scanned (encoded, unencoded zipped and unzipped), clamAV has a lot of work to do, and you need to be more patient with Russian Doll stress tests such as this. Whilst the email is only 5MB in size, the total amount of data which need to be scanned is 137.58 MB, of which 132MB needs to be created by the various mechanisms mentioned above. It seems to me that you may not have looked carefully at your settings in clamd.conf, which could be leading you to a DoS attack. > Regards, > > Rick -Nigel _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
