At 11:51 PM 7/2/2003, Jason Haar wrote:
Arg. The Q-S code in question is blocking for what it thinks is a valid
reason, but then it skips to the next line - i.e. the invalid line doesn't
get written out...

Buglet: the intent is still correct, but this is sure making debugging
difficult. I'll see what I can do ;-)

By looking at an email destined for another mail server, I believe the offending header line that caused the detection of "Illegal breakage" was a line of Dear OSU Parking Permit Customer: at the (apparently) bottom of the header. The sender did not apparently have a space between the header and the body text. Mail systems vary on what they do in this case. Here's one fragment of header/text after downloading...

/cut/
Date: Wed, 02 Jul 2003 16:11:46 -0400 (EDT)
Date-warning: Date header was inserted by mail-mta6.service.ohio-state.edu
From: [EMAIL PROTECTED]
Subject: 03-04 Parking Permit Renewal
Message-id: <[EMAIL PROTECTED]>
Content-type: text/PLAIN
Dear OSU Parking Permit Customer:

We are pleased to announce that the web application process for
/cut/

By the way, the spaces were the damaging bits, as the code looks for that...

} elsif (/^([^\s]+)/) {
#This means it's not a continuation header
if ($BAD_MIME && !/^([^\s]+):(.*)$/) {
#Wow - a header (not header+value) that goes onto another line - not likely!
$illegal_mime=1;
$quarantine_description='Illegal breakage found in header name - potential virus';


Jason, if there is a code tweak you recommend to retain the error line during
quarantining, I'll be happy to hand add it to my 1.16 implementation.

Thanks
John



--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general



------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to