Hi folks,
i would like to know why the following mail is blocked by
qmail-scanner-1.20rc3 with "Disallowed content found in
MIME attachment". The content is rather harmless.
Received: from pop.gmx.de (HELO mail.gmx.net) (213.165.64.20)
by zzzzzzzzzzzz with SMTP; 16 Sep 2003 11:05:59 -0000
Received: (qmail 9126 invoked by uid 65534); 16 Sep 2003 11:05:56 -0000
Received: from unknown (EHLO gmx.de) (80.187.7.188)
by mail.gmx.net (mp027) with SMTP; 16 Sep 2003 13:05:56 +0200
X-Authenticated: #12345678
From: "xxxx" <[EMAIL PROTECTED]>
To: "xxxxxxxxxx" <[EMAIL PROTECTED]>
Subject: yyyyyyyyyyyyyyyyyyyyyyyyy
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----_=_NextPart_000_000093F8.0340CE10"
X-Qmail-Scanner-Message-ID: <[EMAIL PROTECTED]>
This is a multi-part message in MIME format.
------_=_NextPart_000_000093F8.0340CE10
Content-Type: text/plain;
charset="iso-8859-1"
------_=_NextPart_000_000093F8.0340CE10
Content-Type: text/xml;
name="BO_4009080_20030916_130452.xml"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="BO_4009080_20030916_130452.xml"
PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iSVNPLTg4NTktMSI/Pg0KPD9hdXRvciBJ
[snipped]
------_=_NextPart_000_000093F8.0340CE10--
*** Qmail-Scanner Quarantine Envelope Details Begin ***
X-Qmail-Scanner-Mail-From: "[EMAIL PROTECTED]" via zzzz
X-Qmail-Scanner-Rcpt-To: "[EMAIL PROTECTED]"
X-Qmail-Scanner: 1.20rc3 (trophie: 6.150-1001/630/49370. problem Found. Processed in
1.334408 secs)
Quarantine-Description: Disallowed content found in MIME attachment - potential virus
*** Qmail-Scanner Envelope Details End ***
Looking into the perl code, there is some comment on this
saying
#This will catch headers that are *correctly* broken over two lines.
#No known mailer does that, but virus writers do, so we block it.
Thanks for any help.
--
regards - uli
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
