Re: Antivirus scanner DoS with zip archives

From: Markus 'FvD' Weber (fvdat_private)
Date: Tue Jun 19 2001 - 03:47:12 PDT

  • Next message: teoat_private: "Re: Antivirus scanner DoS with zip archives" 

    There is 42.zip out there, 42K total size, which consists of
nested zip's and at the end a 4GB file (IIRC 6 levels deep,
each level 17 'wide') ... kills most email virus checker.

To protect your self from you email virus gateway crashing,
try to ensure that each single thread which checks an email
has only limited resources. Under Unix ulimit/limit is your
best friend ... (for process and file size). 

Markus

    This archive was generated by hypermail 2b30 : Tue Jun 19 2001 - 10:33:33 PDT