I've been using rc2 for a while now on our live server, and it seems to be
working very well, except.....
There have been a couple of emails blocked with the:
Disallowed MIME boundary found in attachment - potential virus
rule, which appear to be valid emails.
The first one originated inside the company and I know the user was using
Outlook for the Mac. The second was an email that was sent in before I
upgraded to rc2, and then forwarded out after upgrading. From the Content-
Type (multipart/appledouble) it also appears this email was created on a
Mac.
I'm not sure whether these are valid emails or whether Outlook for the Mac
is broken, but for the moment I've just commented out the relevant code, as
we haven't had any dangerous emails blocked by this rule.
I've included what seems to be the relevant mime boundaries below.
In addition I spoke to the 1st user who said that most of the emails he
sends contain attachments of varying sizes and types and none have been
blocked before or since.
I can send the full original emails if necessary, but I'd rather not send
them to everyone on the mailing list.
Chris Hine
---------------------
1st message:
------_=_NextPart_000_01C36C87.1FC58910
Content-Type: multipart/appledouble;
name="DL Envelope.QXD";
boundary="----_=_NextPart_001_01C36C87.1FC58910"
Content-Disposition: attachment;
filename="DL Envelope.QXD"
------_=_NextPart_001_01C36C87.1FC58910
Content-Type: application/applefile;
name="DL Envelope.QXD";
boundary="----_=_NextPart_001_01C36C87.1FC58910"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="DL Envelope.QXD"
---------------------
2nd message:
------_=_NextPart_000_01C370B8.F85E9F70
Content-Type: multipart/appledouble;
name="0709 mid.doc";
boundary="----_=_NextPart_001_01C370B8.F85E9F70"
Content-Disposition: attachment;
filename="0709 mid.doc"
------_=_NextPart_001_01C370B8.F85E9F70
Content-Type: application/applefile;
name="0709 mid.doc";
boundary="----_=_NextPart_001_01C370B8.F85E9F70"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="0709 mid.doc"
AAUWBwACAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAIAAAASgAAABAAAAAJAAAAWgAAACAAAAADAAAA
egAAAA0AAAACAAAAhwAAAR4AAAAAAAAAAAAAAAAAAAAAVzhCTk1TV0QAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAwNy8wOSBtaWQuZG9jAAABAAAAAQAAAAAAAAAAHgAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAEA
AAAAAAAAAB5TT1JUAnIAgAAcAB7//w==
------_=_NextPart_001_01C370B8.F85E9F70
Content-Type: application/octet-stream;
name="0709 mid.doc";
boundary="----_=_NextPart_001_01C370B8.F85E9F70"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="0709 mid.doc"
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
