[Mimedefang] Possible Attack?

[David F. Skoll]

> Are these messages valid?

It depends on your definition of "valid". :-)

> Apr 28 17:24:17 access sendmail[30994]: g3SLOGXl030987: Truncated MIME
> Content-Type header due to field size (length = 44) (possible attack)

Somebody is setting the (undocumented) MaxMimeHeaderLength value in
your configuration file.  These are Sendmail messages, not MIMEDefang
messages.

Regards,

David.