amavis does not seem to be skipping messages with large attachments

[Marty Troup]

We have a setup running on FreeBSD 7.2 using Postfix, spamassassin, and
maia based on the tutorial at http://www.purplehat.org/?page_id=4

I built this server 4-5 years ago and all has been running pretty
smoothly.  We are wanting to migrate to a newer server but have no been
able to do so yet.  In the past year I noticed that amavis is generating a
lot more tmp files so I wrote a script to notify me when /var is filling up
and another script to clean it daily.

A week or so ago the owner needed to increase the allowed attachment size
to 50MB to allow some of his clients to email him large files for projects,
I then noticed I was getting notified more often and looked into it and see
that amavis is still trying to scan the large files which then causes them
to dump a tmp file and /var to fill up.  I have modified the script to
clean more often to keep it under control, but the issue remains and I
can't seem to find a fix.

I have checked amavisd.conf and maia.conf and both are set to ignore if
larger than 256*1024 but they don't seem to be working.

$sa_mail_body_size_limit = 256*1024; # don't waste time on SA if mail is
larger

This is the error from the mail log:

Nov 12 18:11:57 mail postfix/smtp[78034]: EE2AD6D411: to=<xxx>,
relay=127.0.0.1[127.0.0.1]:10024, delay=117768, delays=117761/0/0.01/7,
dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error
in processing, id=77837-04, spam_scan FAILED: Out of memory during "large"
request for 67112960 bytes, total sbrk() is 496080896 bytes at
/usr/local/sbin/amavisd-maia line 3786, <GEN13> line 787410. (in reply to
end of DATA command))

Please point me in the right direction if you can, I am running Maia
version 1.0.2a and I believe I am running amavisd-new 2.2.1 based on the
comments within /usr/local/sbin/amavisd-maia which also references
amavisd-maia 1152 2007-01-05 05:37:42Z

Thank you,
Marty
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20141112/03cf695c/attachment.html>