If you figure out how then let us know please.
Cordially, Heimir Eidskrem i360 Consulting 713-981-4900 hei...@i360.net www.i360.net Your IT provider. -----Original Message----- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of John Tolmachoff Sent: Thursday, August 18, 2016 4:57 PM To: community@mailsbestfriend.com Subject: [MBF] Re: Odd attachment header for an Excel file Thanks Andy, you are always good for a detailed explanation. However, that means I have to go back to the drawing board on what I am trying to accomplish. That is to catch DOC and XLS files that are NOT created by the appropriate MS program such as all the DOC files that are virus laden lately. -----Original Message----- From: "Andy Schmidt" <andy_schm...@hm-software.com> Sent: Thursday, August 18, 2016 2:33pm To: community@mailsbestfriend.com Subject: [MBF] Re: Odd attachment header for an Excel file Hi John, Actually - the "filename" parameter is assigned to the "Content-Disposition" headers - and that's where I'm used to see it (however, I admit to seldomly having reason to look for it): http://www.iana.org/assignments/cont-disp/cont-disp.xhtml I never noticed that parameter being added to the Content-Type header - and haven't been able to find any reference that this is where an application should expect a file name. >> either a LF, CR, TAB or Space << It should NEVER be EITHER a "LF" or "CR". The only valid character sequence in a header MUST be a CRLF combination - they MUST NOT appear individually. If they do, this email structure is NOT MIME compliant which typically means it was created by some application programmer who knows his programming language, but is ignorant about the environment he is targeting. -----Original Message----- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of John Tolmachoff Sent: Thursday, August 18, 2016 5:02 PM To: community@mailsbestfriend.com Subject: [MBF] Odd attachment header for an Excel file I have captured a valid email message with the following for an Excel attachment: --_42177162-4ccf-48c3-8dd6-dfe95c8acffa_ Content-Type: application/vnd.ms-excel Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="INV OFFER 081816.xls" What is ODD is that I have all ways seen after the Content-Type: Application/vnd.ms-excel immediately followed by a : (colon) then either a LF, CR, TAB or Space and then "name=filenamehere" Has any one else seen this? It is from an MSN email address and came properly through Hotmail.com servers. John T eServices For You ############################################################# This message is sent to you because you are subscribed to the mailing list <community@mailsbestfriend.com>. To unsubscribe, E-mail to: <community-...@mailsbestfriend.com> To switch to the DIGEST mode, E-mail to <community-dig...@mailsbestfriend.com> To switch to the INDEX mode, E-mail to <community-in...@mailsbestfriend.com> Send administrative queries to <community-requ...@mailsbestfriend.com> ############################################################# This message is sent to you because you are subscribed to the mailing list <community@mailsbestfriend.com>. To unsubscribe, E-mail to: <community-...@mailsbestfriend.com> To switch to the DIGEST mode, E-mail to <community-dig...@mailsbestfriend.com> To switch to the INDEX mode, E-mail to <community-in...@mailsbestfriend.com> Send administrative queries to <community-requ...@mailsbestfriend.com> -- No virus found in this email Scanned by Smart Mail Security Services ############################################################# This message is sent to you because you are subscribed to the mailing list <community@mailsbestfriend.com>. To unsubscribe, E-mail to: <community-...@mailsbestfriend.com> To switch to the DIGEST mode, E-mail to <community-dig...@mailsbestfriend.com> To switch to the INDEX mode, E-mail to <community-in...@mailsbestfriend.com> Send administrative queries to <community-requ...@mailsbestfriend.com>
