On Thu, May 23, 2002 at 11:53:42AM -0500, Trey Nolen wrote:
> a problem, but we have just switched back to 1.01 and we are pumping out
> deliveries like crazy.
Interesting. There are only two fundemental differences between 1.01 and
1.12 (actually kicked in with 1.02).
Sys::Syslog is used
BAD_MIME support added.
Sys::Syslog is only used when errors occur - so that shouldn't be it - which
leaves BAD_MIME.
Now that one is interesting. It needs perl to scan every character of every
line in each message looking for illegal chars (\r and \0) in MIME mail
messages. This is certainly making perl have to work harder - but enough to
cause your problem? I don't know. Certainly I haven't noticed it causing
extra load.
Can you make the following changes to 1.12 and try again?
<line ~ 102>
my $BAD_MIME='0'; #turn off BAD_MIME checks
<line ~ 444>
change:
if (/\r|\0/) {
to:
if ($BAD_MIME && /\r|\0/) {
That should stop perl searching every char.
If that fixes your problem, then again I'd have to ask what kind of load for
the hardware you have is being used.
The reality is that Qmail-Scanner is going to be doing MORE of these sorts
of checks in the future - not less. The fight against viruses has now
entered the realm of fighting broken MUA software - like Outlook. As such we
can't rely on generic MIME parsers (like reformime) to "do it right" - they
are. It's not their fault that some broken MUA doesn't handle MIME messages
the same way that the standards say it should. However, as one of the
primary tasks of Qmail-Scanner is to protect such software - the Q-S will
have to do it instead.
--
Cheers
Jason Haar
Information Security Manager
Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
_______________________________________________________________
Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
