Matt wrote:

Hi,
I have a web application that is trying to send data to me via my mail
server and it gets blocked with the following:

Tue, 21 Dec 2004 11:50:45 -0500 [EMAIL PROTECTED]
[EMAIL PROTECTED] Unhandled ASP Exception notification -
System.Exception       Disallowed breakage found in header name -
potential virus      spamassassin: x.xx.

Can anyone tell me how I can figure out what the Disallowed breakage
might be in the header name?




------------------------------------------------------------------------

220 smtp2-ha.xxxxxxxxx.net ESMTP
HELO X104
250 smtp2-ha.xxxxxxxxx.net
MAIL FROM: <[EMAIL PROTECTED]>
250 ok
RCPT TO: <[EMAIL PROTECTED]>
250 ok
RSET
250 flushed

502 unimplemented (#5.5.1)
MAIL FROM: <[EMAIL PROTECTED]>
250 ok



There's a problem with the app right there - what the hell is it doing? Why RSET? And then why send a CRLF pair afterwards with no data? come to think of it - is it some kind of "checking the validity of the address" check? Don't point that at a Courier SMTP server - it'd eat that kind of behavior for lunch ;-) [it'd think you're a spammer]


Anyway, that's an aside - that has nothing to do with Qmail-Scanner.

RCPT TO: <[EMAIL PROTECTED]>
250 ok
DATA
354 go ahead
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
Subject: Unhandled ASP Exception notification - System.Exception
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="NextMimePart"
Content-Transfer-Encoding: 7bit
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.




..and there's your problem. There needs to be an empty line between the last header and the "This message is in MIME format..." line. Change the ASP code to add that in and you'll be sweet.


BTW: Good report - all that information leads us directly to the problem :-)

--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to