El lun, 19-04-2004 a las 19:28, David F. Skoll escribi�:
> On Mon, 19 Apr 2004, Administrador DyR wrote:
>
> > The last week I received a typical mail-delivery error-message caused by
> > the Netsky virus. The notifying message had, as attached message, the
> > whole original message, and this one contained the whole virus-infected
> > ZIP file.
>
> > I think MIMEDefang should scan recursively attached MIME-Encoded
> > messages... Perhaps it does, and the problem is at my configuration...
>
> It does, but some MTAs (qmail, for example) return a plain-text
> notification message without any MIME structure. MIMEDefang does not
> attempt to interpret such messages as multipart, although its
> conceivable some "smart" (read: "dumb") MUA might.
>
Well, the remote MTA was a Microsoft's one. I read the mail with Ximian
Evolution, and it read this message as a correctly MIMEd message. I
think it is...
Here is the message that went through MIMEDefang.:
Return-Path: <MAILER-DAEMON>
Received: from mail.bigfoot.com (mail-kr.bigfoot.com [211.115.216.252]) by
cibeles.dyr.es (dyr.es/8.12.3/Debian-6.6) with SMTP id i3FBqgh6022706 for
<[EMAIL PROTECTED]>; Thu, 15 Apr 2004 13:52:44 +0200
Received: from fesrv.ccs.int ([80.81.125.254]) by
BFLITEMAIL-KR5.bigfoot.com (LiteMail v3.03(BFLITEMAIL-KR5)) with SMTP id
0404150752_BFLITEMAIL-KR5_244245_946526; Thu, 15 Apr 2004 07:52:52 -0400 EST
Received: from mail pickup service by fesrv.ccs.int with Microsoft SMTPSVC;
Thu, 15 Apr 2004 13:33:31 +0200
Thread-Topic: Undeliverable: Re: Question
thread-index: AcQi3XobQnDd81SvSombHuNaKP3/4A==
From: "System Administrator" <[EMAIL PROTECTED]>
Sender: "System Administrator" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Undeliverable: Re: Question
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="----=_NextPart_000_1631_01C422EE.3DCD92E0"
Content-Class: urn:content-classes:dsn
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 15 Apr 2004 11:33:31.0246 (UTC)
FILETIME=[7A8E00E0:01C422DD]
Date: 15 Apr 2004 13:33:31 +0200
X-Spam-Status: No, hits=-1.5 required=10.0
tests=BAYES_00,MLM,NO_DNS_FOR_FROM,UPPERCASE_25_50 version=2.63
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11)
X-SA-Score: -1.463 - BAYES_00,MLM,NO_DNS_FOR_FROM,UPPERCASE_25_50
X-Scanned-By: MIMEDefang 2.41
X-UIDL: @Fb"!'>[EMAIL PROTECTED]'`"!
X-Evolution-Source: pop://[EMAIL PROTECTED]/
This is a multi-part message in MIME format.
------=_NextPart_000_1631_01C422EE.3DCD92E0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Your message
To:
Subject: Re: Question
Sent: Thu Apr 15 01:33:30 2004
did not reach the following recipient(s):
[EMAIL PROTECTED] on Thu Apr 15 01:33:30 2004
The e-mail account does not exist at the organization this message
was sent to. Check the e-mail address, or contact the recipient
directly to find out the correct address.
<fesrv.ccs.int #5.1.1>
------=_NextPart_000_1631_01C422EE.3DCD92E0
Content-Type: message/delivery-status
Content-Transfer-Encoding: 7bit
???Reporting-MTA: dns; fesrv.ccs.int
Final-Recipient: RFC822; [EMAIL PROTECTED]
Action: failed
Status: 5.1.1
X-Supplementary-Info: fesrv.ccs.int
X-Display-Name: [EMAIL PROTECTED]
------=_NextPart_000_1631_01C422EE.3DCD92E0
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit
???Thread-Topic: Question
Received: from ccsprofesionales.es ([81.33.215.200]) by fesrv.ccs.int with
Microsoft SMTPSVC(5.0.2195.6713); Thu, 15 Apr 2004 13:33:24 +0200
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: Question
Date: Thu, 15 Apr 2004 14:18:39 +0200
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Return-Path: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 15 Apr 2004 11:33:24.0707 (UTC)
FILETIME=[76A83B30:01C422DD]
This is a multi-part message in MIME format.
------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
I have corrected your document.
------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: application/octet-stream; name="document04_msanchez.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="document04_msanchez.zip"
UEsDBAoAAAAAAEZajzCjiB3egHMAAIBzAABTAAAAZG9jdW1lbnQudHh0ICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC5leGVN
(here goes the whole zipped virus.)
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC5leGVQ
SwUGAAAAAAEAAQCBAAAA8XMAAAAA
------=_NextPart_000_0016----=_NextPart_000_0016--
------=_NextPart_000_1631_01C422EE.3DCD92E0--
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
