[Mimedefang] Incorrect decomposing of MIME mails
Steffen Kaiser
skmimedefang at smail.inf.fh-bonn-rhein-sieg.de
Wed Aug 28 05:31:01 EDT 2002
Hello,
I'm sending a mail with the following layout through MIMEDefang v2.19:
===
MIME-Version: 1.0
Content-Type: multipart/alternative;
The non-MIME part is completely empty.
1. MIME-part:
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
2. MIME-part:
Content-Type: audio/x-midi;
name=border.bat
Content-Transfer-Encoding: base64
3. MIME-part:
completely empty, not even an empty line - the boundary lines follow each
other immediately.
4. MIME-part:
Content-Type: application/octet-stream;
name=tn_twnex567_jpg[1].jpg
Content-Transfer-Encoding: base64
===
mimedefang.pl -structure < original_mail
non-leaf: type=multipart/alternative; fname=; disp=inline
leaf: type=text/html; fname=; disp=inline
leaf: type=audio/x-midi; fname=border.bat; disp=inline
leaf: type=text/plain; fname=; disp=inline
===
There is a problem decomposing the MIME parts (last two ones).
Here is a copy&paste of the relavant part of the mail viewed via "less"
between the two last leafs:
===
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=9
--U6m35198S717Re7c1O
--U6m35198S717Re7c1O
Content-Type: application/octet-stream;
name=tn_twnex567_jpg[1].jpg
Content-Transfer-Encoding: base64
Content-ID: <G9Bb19e8>
/9j/4AAQSkZJRgABAQEASABIAAD/2wBDABALDA4MChAODQ4SERATGCgaGBYWGDEjJR0oOjM9
PDkzODdASFxOQERXRTc4UG1RV19iZ2hnPk1xeXBkeFxlZ2P/2wBDARESEhgVGC8aGi9jQjhC
===
In the mail passed forward to the receipent, the MIME-header of the last
leaf looks like so (copy&paste):
===
--U6m35198S717Re7c1O
Content-Disposition: inline
Content-Type: application/octet-stream;
name=tn_twnex567_jpg[1].jpg
Content-Transfer-Encoding: base64
Content-ID: <G9Bb19e8>
/9j/4AAQSkZJRgABAQEASABIAAD/2wBDABALDA4MChAODQ4SERATGCgaGBYWGDEjJR0oOjM9
===
(and has the virus warning attached, that's why I started wondering.)
The virus-infected and the completely empty MIME-parts have been removed.
During ./configure this was issued:
checking for Perl module IO::Socket... ok
checking for Perl module MIME::Tools 5.410 ()... ok
checking for Perl module MIME::WordDecoder... ok
checking for Perl module Digest::SHA1... ok
checking for Perl module Sys::Syslog... ok
checking that MIME-Tools has been patched... yes
checking for Perl module Mail::SpamAssassin 1.6 or better... ok
checking for Perl module Anomy::HTMLCleaner... ok
checking for Perl module HTML::Parser... ok
checking for Perl module File::Scan... ok
According CPAN: m MIME::Tools
Module id = MIME::Tools
CPAN_USERID ERYQ (Eryq <eryq at zeegee.com>)
CPAN_VERSION 5.411
CPAN_FILE E/ER/ERYQ/MIME-tools-5.411a.tar.gz
MANPAGE MIME-tools - modules for parsing (and creating!) MIME
entities
INST_FILE /usr/local/lib/perl5/site_perl/5.6.1/MIME/Tools.pm
INST_VERSION 5.411
In mimedefang-filter:
$AddWarningsInline = 1;
$GeneralWarning = 'some lengthy text';
There is no "$Stupidity" set to true.
Bye,
--
Steffen Kaiser
More information about the MIMEDefang
mailing list