I'm getting some legitimate mail that is being blocked by qmail-scanner. I know I can turn off MIME checks by setting $BAD_MIME_CHECKS='0' and the messages are allowed to come through just fine.

The admin for the sending mail server has agreed to speak with me about this, and I'd like to give him an explanation on why qmail-scanner is rejecting his messages.

I've included the message below, along with the qmail-scanner info about the message. If anyone can see any obvious reasons why this is getting rejected, please let me know. If not, I guess I will tell him I have no idea why they are getting rejected, and ask him to come here himself if he's really concerned about it.

PS: I am the admin of falcon.netfire2k.com and draconys.com. The messges being sent are voice mails that have been converted into WAV format and are being sent to my server via email.


Received: from adsl-64-162-20-18.dsl.scrm01.pacbell.net (HELO ofxf1) (64.162.20.18)
by falcon.netfire2k.com with SMTP; 13 May 2004 17:20:14 -0500
Received: by ofxf1 (IBM OS/2 SENDMAIL VERSION 2.02/2.12um) id PAA105.84; Thu, 13 May 2004 15:18:09 -0700
Date: Thu, 13 May 2004 15:18:09 -0700
From: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
To: [EMAIL PROTECTED]
Subject: Message_FutureLynx
Content-Type: multipart/mixed; boundary="-"


This is a MIME encoded message from FutureLynx.  Decode it with "munpack"
or any other MIME reading software.  Mpack/munpack is available
via anonymous FTP in ftp.andrew.cmu.edu:pub/mpack/
---

Enclosed is a message that you requested to be forwarded.
The time and date appear as the messages time and date.

--
Content-Type: application/octet-stream; name="V1227751.wav"
Content-Transfer-Encoding: base64
Content-Disposition: inline; filename="V1227751.wav"
Content-MD5: g/hwyjB4WknpNji6sscrQw==

UklGRnDkBgBXQVZFZm10IBAAAAABAAEAESsAABErAAABAAgAZGF0YUzkBgCAgICAgICAgICA
gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA
gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICA

< snip about 8300 lines of gibberish similar to the above>

-----

*** Qmail-Scanner Quarantine Envelope Details Begin ***
X-Qmail-Scanner-Mail-From: "[EMAIL PROTECTED]" via falcon
X-Qmail-Scanner-Rcpt-To: "[EMAIL PROTECTED]"
X-Qmail-Scanner: 1.22st (clamscan: 0.67. spamassassin: 2.55. problem Found. Processed in 27.611183 secs) process 30116
Quarantine-Description: Disallowed characters found in MIME headers
*** Qmail-Scanner Envelope Details End ***





And here's the message qmail-scanner sent me about the message that was blocked:





Attention: [EMAIL PROTECTED]

A problem was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message reaching its destination.


The problem was reported to be:

Disallowed  characters found in MIME headers

Please contact your IT support personnel with any queries regarding this
policy.

Your message was sent with the following envelope:

MAIL FROM: [EMAIL PROTECTED]
RCPT TO:   [EMAIL PROTECTED]

... and with the following headers:

---
MAILFROM: [EMAIL PROTECTED]
Received: from adsl-64-162-20-18.dsl.scrm01.pacbell.net (HELO ofxf1) (64.162.20.18)
by falcon.netfire2k.com with SMTP; 13 May 2004 17:20:14 -0500
Received: by ofxf1 (IBM OS/2 SENDMAIL VERSION 2.02/2.12um) id PAA105.84; Thu, 13 May 2004 15:18:09 -0700
Date: Thu, 13 May 2004 15:18:09 -0700
From: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
To: [EMAIL PROTECTED]
Subject: Message_FutureLynx
Content-Type: multipart/mixed; boundary="-"


The original message is kept in:

 falcon:/var/spool/qmailscan/quarantine/new/falcon108448681458730116

where the  can further diagnose it.

The Email scanner reported the following when it scanned that message:

---perlscanner results ---
problem 'Disallowed  characters found in MIME headers'
found in message
---

_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar – get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/




-------------------------------------------------------
This SF.Net email is sponsored by: SourceForge.net Broadband
Sign-up now for SourceForge Broadband and get the fastest
6.0/768 connection for only $19.95/mo for the first 3 months!
http://ads.osdn.com/?ad_id=2562&alloc_id=6184&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to