Heap protection should work as follows:

Basic:

CmdData should keep track of the available HEAP.  In the event the available HEAP (Runtime.maxMemory() - Runtime.totalMemory < Threshhold) then an exception should be thrown and the mail should be refused with an error specifying that it exceeds the allowed size.

Advanced

Moved to MailStoreDesign