Nessus DOS attack against Sophie

Michael Glad <[email protected]> Thu, 16 Sep 2004 14:20:09 +0200 (CEST)
Newsgroups gmane.comp.security.virus.vtools
Message-ID <[email protected]>
We use Sophie from mimedefang and are verify satisfied with
it. However, one of my collegaues ran the Nessus security scanner
enabling 'dangerous' tests. As part of the test, it sent a
mail through our mailserver. It caused severe overloading of 
the filter machine. A zip file which was part of the mail contained zip
files containing zip files which untimately ended up in some verfy large
.dll files. I've searched the web for info about how to configuere
Sophos/Sophos to cope with such DOS attacks but have found no
solution. I'll be glad to hear if there's a solution our there so that
we are prepared the day somebody decides to launch a real attack
against us.

   -- Michael Glad, email: [email protected]
      CS Dept, Aarhus University Denmark.

NB: the zip file is available at http://www.daimi.au.dk/~glad/sophos-dos.zip. 
    Please don't blame me if it chokes your dog :-)