On Thu, 6 Sep 2012, Piotr Kapiszewski wrote:
We noticed a big increase in user CPU utilization on our MX servers
since Sep 2nd sa-update. On a typical day we process over 2 million
emails on our mail cluster.
The issue was an old version of __SARE_URI_VISIT_US in 70_sare_uri1.cf
If you have a version of 70_sare_uri1.cf installed and it's dated 2005, it
will cause a loop on certain (possibly all) recent Facebook mails due to
an unbounded regex in a body rule.
The SARE rules are all stale and deprecated, they should no longer be
used.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
10 days until the 225th anniversary of the signing of the U.S. Constitution
