Re: [Declude.Virus] Strange log Entry

2001-12-03 Thread R. Scott Perry 


>I see this type of log entry in my declude logs about 2 or 3 times a day.
>Can someone shed some light on it for me?
>
>11/30/2001 10:55:36 Qba0820e Warning: EOF in middle of MIME segment []
>[--2108ef124501dfae7a3ee072572b7fcf]

That occurs when there is a malformed E-mail.  Specifically, there is not 
MIME boundary separator indicating the end of the E-mail.  This would occur 
if part of the E-mail was cut off.  This seems to happen occasionally with 
spam, and also happened with the "Anna" virus (which caused it to pass 
through at least one SMTP-based AV program successfully).  That message 
will only appear at LOGLEVEL HIGH or LOGLEVEL DEBUG.
  -Scott

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

[Declude.Virus] Strange log Entry

2001-12-03 Thread Steven Copeland 

I see this type of log entry in my declude logs about 2 or 3 times a day.
Can someone shed some light on it for me?

11/30/2001 10:55:36 Qba0820e Warning: EOF in middle of MIME segment []
[--2108ef124501dfae7a3ee072572b7fcf]



^^^

Thank You,
Steven Copeland

Network Administrator
Pioneer Telephone Cooperative, Inc.
http://www.pldi.net
http://www.pld.net
http:/www.ptci.com

***
  We trained very hard.  But it seemed that every time we were beginning
to form into teams, we would be reorganized.  I was to learn later in life
that we tend to meet any new situation by reorganizing.  And what a
wonderful method it can be for creating the illusion of progress while
producing confusion, inefficiency, and demoralization.

GAIUS PETRONIUS ARBITER (First century A.D.)
***

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .