AMQ 7 should mitigate dangerous redelivery configurations by default

It's possible to set an address configuration like this:

<max-delivery-attempts>-1</max-delivery-attempts>
<redelivery-delay>1</redelivery-delay>

Or even,

<redelivery-delay>0</redelivery-delay> 

If a client is badly behaved, and just rejects every message it consumes, this will create a huge amount of journal activity in the broker, which could ultimately exceed its allowed storage.

In cases like this, the broker should impose a different, more manageable redelivery delay, unless the administrator sets some additional property to confirm that this setting really is required.