[Mimedefang] Virus scanning

David F. Skoll dfs at roaringpenguin.com
Mon Jan 3 16:02:16 EST 2005


On Mon, 3 Jan 2005, David Crowfoot wrote:

> When some emails come in from a null sender (<>) and contain a file
> attachment listed in the filter (SCR,COM) and a virus (Sober.J), the
> filter just adds the Header that it went through MIMEDefang, but it
> never catches the virus OR file attachment.  All other virual emails are
> caught.

Probably the bounce is generated by qmail, which puts the entire original
message in a plain-text reply.  Since it's just a plain text message,
a proper MIME decoder won't decode it and won't even see the virus.

This shouldn't be a problem unless your e-mail client tries to be
clever [sic] and "decode" the plain-text message as if it were a MIME
message.  If your e-mail client does this, then it's time to get a new
e-mail client.

Regards,

David.



More information about the MIMEDefang mailing list