Refer to attached TrendMicro's Interscan proxy VM (a custom Linux)
that shows spurious memory shortage.
Have allocated 32GB to the VM & with only 2 users accessing, already
getting these memory messages : plan to roll out to 500 users.
What can be done to address this? Increase swap space or RAM?
Or there's something to tune? Hopefully don't have to switch to
another type of proxy.
As this is a bundled free product, quite difficult to get support.
Btw, what's the default root password when it's first set up? TMproxyoutofMem.png
LinuxLinux SecurityOS SecurityLinux OS Dev
Last Comment
sunhux
8/22/2022 - Mon
Mal Osborne
Check the scan settings, you might be being hit by "Zip bombs".
This is when a recursive compressed file with a heap more compressed files inside of it is sent via email. It is pretty simple to craft for instance a 1Mb attachment that contains a terabyte of data, once uncompressed. Some scanners will attempt to open up such an archive, usually running into RAM or hard drive resource. There are usually therefore setting to just block incoming files that have a ridiculous compression ratio, or a stupid amount of data.
Zip bombs were more prevalent a few decades ago, but could still be around.
Guessed the root password right & got in : found that it's due to the "low power"
triggering it: we ordered the server hardware but it took a month longer than
expected to arrive so we installed this proxy on a PC with 32GB RAM.
The "low power" UPS issue was fixed & my colleague reported this fixed it.
This is when a recursive compressed file with a heap more compressed files inside of it is sent via email. It is pretty simple to craft for instance a 1Mb attachment that contains a terabyte of data, once uncompressed. Some scanners will attempt to open up such an archive, usually running into RAM or hard drive resource. There are usually therefore setting to just block incoming files that have a ridiculous compression ratio, or a stupid amount of data.
Zip bombs were more prevalent a few decades ago, but could still be around.
More here: https://en.wikipedia.org/wiki/Zip_bomb