[Mimedefang] Suspicious chars in header

Marcelo Souza mpsouza at centroin.com.br
Mon Nov 12 10:08:43 EST 2007


Hi,

	Is there any way to regenerate the COMMANDS file with quarantined 
message? 
	I found no null or CR in headers.

- Marcelo 

On Thu, 8 Nov 2007, Steffen Kaiser wrote:

|-----BEGIN PGP SIGNED MESSAGE-----
|Hash: SHA1
|
|On Wed, 7 Nov 2007, scuba at centroin.com.br wrote:
|
|> 	I've some complains about messages dropped due suspicious characters in
|> header.
|> 	I quarantined, some of then but could not identify the problem.
|> 	How can I debug the MD process with quarantined message?
|
|Look out for NUL characters (ASCII 0, \0) and lone CR (ASCII 13, \r) in the
|mail.
|
|I used to debug MIMEDefang by
|
|cd /.../qdir
|su mdefang -c "perl -d $(which mimedefang.pl) -f /etc/mail/mimedefang-filter
|$(pwd)"
|
|But: You need a valid COMMANDS file (not there by default) and rename
|ENTIRE_MESSAGE to INPUTMSG.
|I copy the COMMANDS file there after quarantining the message.
|
|Bye.
|
|- -- Steffen Kaiser
|-----BEGIN PGP SIGNATURE-----
|Version: GnuPG v1.4.6 (GNU/Linux)
|
|iQEVAwUBRzLsBOgJIbZtwg6XAQKBggf+MDNEk+SM1uuhORHelfg2dP9IpRevFTvL
|CyAg5VN9+jP2A07t5owG5G3PA0fRAHmoOZsaqP1qHzd41IncJqdLBUwa47nqAERz
|OEIx9XnVaH2P8Yh8W0QKZPvmHQDSEG3v4MspMubDeFe0tEWMUCqCod0XwJs4l7oK
|TDqr4hTZDRMouvcka4eWKveAt5Jwj/dbmIJAQsUgViTNb8xMNetU5Gjo4X/im94p
|g96xFmhhJM1ck68IhJLKf1OWFvX1D5eaqZDrQa01D+EFK7gImRWTj/7f7qgkvYVw
|pHIUDNMNe0Brj0Zr67PHmpqAMOdsWoUsgWj2SDjSJNAVrO48nJ0Ssw==
|=eWTm
|-----END PGP SIGNATURE-----
|_______________________________________________
|NOTE: If there is a disclaimer or other legal boilerplate in the above
|message, it is NULL AND VOID.  You may ignore it.
|
|Visit http://www.mimedefang.org and http://www.roaringpenguin.com
|MIMEDefang mailing list MIMEDefang at lists.roaringpenguin.com
|http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
|


- Marcelo



More information about the MIMEDefang mailing list