On Mon, 2003-12-08 at 14:02, McKeever Chris wrote:
> from the /var/qmail/supervise/qmail-smtpd/run:
> exec /usr/local/bin/softlimit -m 10000000
> 
> can that be too small?  I will boost it to 12000000 and see what happens
> 

I don't know - that's the point! You have to find this out for yourself.
It's totally dependant on - well - everything.


> Also note that the two that were caught by the second box were at very off-peak 
> hours:
> 

That won't mean anything.

> 37  Mail to [EMAIL PROTECTED] from "Net Delivery Service" ; Exploit.IFrame.Gen - 
> /mail-data/atmail-users/tmp/msg-9716-1.html: 
> Exploit.IFrame.Gen FOUND   05/12/03 05:33:32  
> 36  Mail to [EMAIL PROTECTED] from "Internet Email Delivery Service" ; 
> Exploit.IFrame.Gen - /mail-data/atmail-users/tmp/msg-4478-1.html: 
> Exploit.IFrame.Gen FOUND   05/12/03 02:08:15  
> 
> Any other ideas? 
> 

Well, were they big messages, or messages with attachments? What makes
them different from the ones that go through fine - that's what you have
to ask yourself. 

> # free -m
>              total       used       free     shared    buffers     cached
> Mem:           248        164         84          0         71         43
> -/+ buffers/cache:         48        199
> Swap:          996          1        994

Your system memory has nothing to do with it. That's why you use
softlimit - to protect your system from crashes due to runaway
processes. If your system itself had run out of memory - you would have
noticed via the syslog entries put in by the kernel.

Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1




-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to