[Mimedefang] Incorrect decomposing of MIME mails

Steffen Kaiser skmimedefang at smail.inf.fh-bonn-rhein-sieg.de
Wed Aug 28 05:31:01 EDT 2002


Hello,

I'm sending a mail with the following layout through MIMEDefang v2.19:
===
MIME-Version: 1.0
Content-Type: multipart/alternative;

The non-MIME part is completely empty.

1. MIME-part:
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

2. MIME-part:
Content-Type: audio/x-midi;
	name=border.bat
Content-Transfer-Encoding: base64

3. MIME-part:
completely empty, not even an empty line - the boundary lines follow each
other immediately.

4. MIME-part:
Content-Type: application/octet-stream;
	name=tn_twnex567_jpg[1].jpg
Content-Transfer-Encoding: base64
===
mimedefang.pl -structure < original_mail
non-leaf: type=multipart/alternative; fname=; disp=inline
    leaf: type=text/html; fname=; disp=inline
    leaf: type=audio/x-midi; fname=border.bat; disp=inline
    leaf: type=text/plain; fname=; disp=inline
===

There is a problem decomposing the MIME parts (last two ones).

Here is a copy&paste of the relavant part of the mail viewed via "less"
between the two last leafs:

===
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=9
--U6m35198S717Re7c1O
--U6m35198S717Re7c1O
Content-Type: application/octet-stream;
        name=tn_twnex567_jpg[1].jpg
Content-Transfer-Encoding: base64
Content-ID: <G9Bb19e8>

/9j/4AAQSkZJRgABAQEASABIAAD/2wBDABALDA4MChAODQ4SERATGCgaGBYWGDEjJR0oOjM9
PDkzODdASFxOQERXRTc4UG1RV19iZ2hnPk1xeXBkeFxlZ2P/2wBDARESEhgVGC8aGi9jQjhC
===

In the mail passed forward to the receipent, the MIME-header of the last
leaf looks like so (copy&paste):
===
--U6m35198S717Re7c1O
Content-Disposition: inline

Content-Type: application/octet-stream;
        name=tn_twnex567_jpg[1].jpg
Content-Transfer-Encoding: base64
Content-ID: <G9Bb19e8>

/9j/4AAQSkZJRgABAQEASABIAAD/2wBDABALDA4MChAODQ4SERATGCgaGBYWGDEjJR0oOjM9
===
(and has the virus warning attached, that's why I started wondering.)
The virus-infected and the completely empty MIME-parts have been removed.

During ./configure this was issued:
checking for Perl module IO::Socket... ok
checking for Perl module MIME::Tools 5.410 ()... ok
checking for Perl module MIME::WordDecoder... ok
checking for Perl module Digest::SHA1... ok
checking for Perl module Sys::Syslog... ok
checking that MIME-Tools has been patched... yes
checking for Perl module Mail::SpamAssassin 1.6 or better... ok
checking for Perl module Anomy::HTMLCleaner... ok
checking for Perl module HTML::Parser... ok
checking for Perl module File::Scan... ok

According CPAN: m MIME::Tools
Module id = MIME::Tools
    CPAN_USERID  ERYQ (Eryq <eryq at zeegee.com>)
    CPAN_VERSION 5.411
    CPAN_FILE    E/ER/ERYQ/MIME-tools-5.411a.tar.gz
    MANPAGE      MIME-tools - modules for parsing (and creating!) MIME
entities
    INST_FILE    /usr/local/lib/perl5/site_perl/5.6.1/MIME/Tools.pm
    INST_VERSION 5.411

In mimedefang-filter:
$AddWarningsInline = 1;
$GeneralWarning = 'some lengthy text';
There is no "$Stupidity" set to true.

Bye,

-- 

Steffen Kaiser







More information about the MIMEDefang mailing list