This was similar to my problem a few weeks ago, I traced back the emails to 
a attachment, that I thought was a virus of some kind but couldn't actually 
prove it.

It has happened about 10 times to 4 users over a period of 3 months, so it 
is very rare and hard to capture.

Be interested in the final analysis.

Wayne

At 10:54 PM 13-03-02 +0100, Anders Johansson wrote:
>Hi,
>
>I just subscribed to this list. I think I've found a problem in qpopper.
>
>I received a mail today, the contents of which was http requests produced by
>some IIS virus, and my qpopper daemon refused to read the mail.
>
>I reduced the spool file to just that mail and let qpopper hang while I did a
>lsof, and found that the file position was at EOF. The mail was 2628 bytes
>long. I checked my mail client's debug output and it reported (as told by
>qpopper) that the mail was 2633 bytes long. It looks to me like some part of
>that mail made qpopper miscalculate the length of the mail.
>
>qpopper version 4.0.3 on SuSE 7.3.
>
>If anyone wants to look at the mail I can put it somewhere for download, (or
>perhaps send it to someone :)
>
>regards
>Anders

Reply via email to