[SAtalk] "report_safe 1" breaks MIME messages

Ralf G. R. Bergs Fri, 31 Oct 2003 01:08:43 -0800

Hi there,

I'm pretty sure this has already been discussed here, but I can't find anything appropriate in the mail archives... :-(

I've just received a message (erroneously) tagged as spam by my SpamAssassin installation (SpamAssassin 2.60 (1.212-2003-09-23-exp)). When I tried to open this message in Mozilla 1.5, it was empty.

Further examination of the raw message showed that the MIME boundaries don't seem to match, therefore Mozilla obviously can't decompose the message.

Here's excerpts of the message:

--------------- 8x -------------------
  From: [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  MIME-Version: 1.0
  Date: Fri, 31 Oct 2003 01:20:56 +0100
  Message-Id: <[EMAIL PROTECTED]>
  Subject: *****SPAM***** The subject
  X-Spam-Flag: YES
  X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
        myhost.org
  X-Spam-Status: Yes, hits=5.2 required=5.0 tests=MIME_BOUND_NEXTPART,
        MIME_BOUND_RKFINDY,PRIORITY_NO_NAME,X_LIBRARY autolearn=no
        version=2.60
  X-Spam-Level: *****
  Content-Type: multipart/mixed;
        boundary="----------=_3FA1AB10.504401E7"
  X-Virus-Scanned: by amavisd-new-20030616-p5 (Debian) at myhost.org
  X-SA-Exim-Mail-From: [EMAIL PROTECTED]
  X-SA-Exim-Scanned: No; SAEximRunCond expanded to false

This is a multi-part message in MIME format

  --=_NextPart_2rfkindysadvnqw3nerasdf
  Content-Type: text/plain
  Content-Transfer-Encoding: 7bit

Sehr geehrter Herr Bergs,

[...]

  --=_NextPart_2rfkindysadvnqw3nerasdf
  Content-Type: application/octet-stream;
          name="Info-Letter.pdf"
  Content-Transfer-Encoding: base64
  Content-Disposition: attachment;
          filename="Info-Letter.pdf"

  JVBERi0xLjINJeLjz9MNCjExNyAwIG9iag08PCANL0xpbm
  IDEzODEgMzI0IF0gDS9MIDY0OTk1IA0vRSAxNTcwNyANL0
  [...]
  MGFlYjI4MzE4ODBhPjxlZDUxYTBiYzI3NGJkOGI5MDM1Mm
  eHJlZg0xNzMNJSVFT0YN

  --=_NextPart_2rfkindysadvnqw3nerasdf--
--------------- 8x -------------------

I've set "report_safe 1" in local.cf, so I expected SA to wrap a report message around the original (supposed-to-be-SPAM) message, attaching the original message as a message/rfc822 MIME part. This is obviously NOT what happened.

Any idea what exactly happened, and why SA behaved other than expected?

Thanks,

Ralf


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] "report_safe 1" breaks MIME messages

Reply via email to