[Mimedefang] Possible bug? Or perhaps bad config?

[Administrador DyR]

El lun, 19-04-2004 a las 19:28, David F. Skoll escribió:
> On Mon, 19 Apr 2004, Administrador DyR wrote:
> 
> > The last week I received a typical mail-delivery error-message caused by
> > the Netsky virus. The notifying message had, as attached message, the
> > whole original message, and this one contained the whole virus-infected
> > ZIP file.
> 
> > I think MIMEDefang should scan recursively attached MIME-Encoded
> > messages... Perhaps it does, and the problem is at my configuration...
> 
> It does, but some MTAs (qmail, for example) return a plain-text
> notification message without any MIME structure.  MIMEDefang does not
> attempt to interpret such messages as multipart, although its
> conceivable some "smart" (read: "dumb") MUA might.
> 

Well, the remote MTA was a Microsoft's one. I read the mail with Ximian
Evolution, and it read this message as a correctly MIMEd message. I
think it is...

Here is the message that went through MIMEDefang.:

Return-Path: <MAILER-DAEMON>
Received: from mail.bigfoot.com (mail-kr.bigfoot.com [211.115.216.252]) by
        cibeles.dyr.es (dyr.es/8.12.3/Debian-6.6) with SMTP id i3FBqgh6022706 for
        <dmarin at dyr.es>; Thu, 15 Apr 2004 13:52:44 +0200
Received: from fesrv.ccs.int ([80.81.125.254]) by
        BFLITEMAIL-KR5.bigfoot.com (LiteMail v3.03(BFLITEMAIL-KR5)) with SMTP id
        0404150752_BFLITEMAIL-KR5_244245_946526; Thu, 15 Apr 2004 07:52:52 -0400 EST
Received: from mail pickup service by fesrv.ccs.int with Microsoft SMTPSVC;
        Thu, 15 Apr 2004 13:33:31 +0200
Thread-Topic: Undeliverable: Re: Question
thread-index: AcQi3XobQnDd81SvSombHuNaKP3/4A==
From: "System Administrator" <administrator at ccs.int>
Sender: "System Administrator" <postmaster at ccs.int>
To: <davefx at mymail.company>
Subject: Undeliverable: Re: Question
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status; boundary="----=_NextPart_000_1631_01C422EE.3DCD92E0"
Content-Class: urn:content-classes:dsn
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <FESRVGXix4A2DreBBsQ000000bf at fesrv.ccs.int>
X-OriginalArrivalTime: 15 Apr 2004 11:33:31.0246 (UTC)
        FILETIME=[7A8E00E0:01C422DD]
Date: 15 Apr 2004 13:33:31 +0200
X-Spam-Status: No, hits=-1.5 required=10.0
        tests=BAYES_00,MLM,NO_DNS_FOR_FROM,UPPERCASE_25_50 version=2.63
X-Spam-Level:  
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11)
X-SA-Score: -1.463 - BAYES_00,MLM,NO_DNS_FOR_FROM,UPPERCASE_25_50
X-Scanned-By: MIMEDefang 2.41
X-UIDL: @Fb"!'>T!!@FG!!+'`"!
X-Evolution-Source: pop://dmarin@mailhost.dyr.es/

This is a multi-part message in MIME format.

------=_NextPart_000_1631_01C422EE.3DCD92E0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Your message

      To: 
      Subject: Re: Question
      Sent:     Thu Apr 15 01:33:30 2004


did not reach the following recipient(s):
msanchez at ccsprofesionales.es on Thu Apr 15 01:33:30 2004

      The e-mail account does not exist at the organization this message
 was sent to.  Check the e-mail address, or contact the recipient
 directly to find out the correct address.
      <fesrv.ccs.int #5.1.1>

------=_NextPart_000_1631_01C422EE.3DCD92E0
Content-Type: message/delivery-status
Content-Transfer-Encoding: 7bit

???Reporting-MTA: dns; fesrv.ccs.int

Final-Recipient: RFC822; msanchez at ccsprofesionales.es
Action: failed
Status: 5.1.1
X-Supplementary-Info: fesrv.ccs.int
X-Display-Name: msanchez at ccsprofesionales.es



------=_NextPart_000_1631_01C422EE.3DCD92E0
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit

???Thread-Topic: Question
Received: from ccsprofesionales.es ([81.33.215.200]) by fesrv.ccs.int with
        Microsoft SMTPSVC(5.0.2195.6713); Thu, 15 Apr 2004 13:33:24 +0200
From: davefx at bigfoot.com
To: msanchez at ccsprofesionales.es
Subject: Re: Question
Date: Thu, 15 Apr 2004 14:18:39 +0200
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Return-Path: <davefx at bigfoot.com>
Message-ID: <FESRVcf3ednHM3SOlbp000000bd at fesrv.ccs.int>
X-OriginalArrivalTime: 15 Apr 2004 11:33:24.0707 (UTC)
        FILETIME=[76A83B30:01C422DD]

This is a multi-part message in MIME format.

------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit

I have corrected your document.


------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: application/octet-stream; name="document04_msanchez.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="document04_msanchez.zip"

UEsDBAoAAAAAAEZajzCjiB3egHMAAIBzAABTAAAAZG9jdW1lbnQudHh0ICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC5leGVN
(here goes the whole zipped virus.)
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC5leGVQ
SwUGAAAAAAEAAQCBAAAA8XMAAAAA

------=_NextPart_000_0016----=_NextPart_000_0016--

------=_NextPart_000_1631_01C422EE.3DCD92E0--