[Mimedefang] non_multipart false positives ?

scuba at centroin.com.br scuba at centroin.com.br
Wed Mar 9 12:13:03 EST 2005


Hi all,

	Some times I get messages reject by the trap:

    # eml is bad if it's not multipart
    if (re_match($entity, '\.eml')) {

	In "sub filter".

	But, AFAIK, it's a fase positive.
	It's trigged by a forwarded message refering to .eml file.

	Following is an example message, some of the original text was
removed.
	Am I wrong?

- Marcelo Souza

----begin----
>
> --- Below this line is a copy of the message.
>
> From: makarios33 at somedomain.com
> To: edmirian at otherdomain.com
> Subject: Fw: : Urgente
> Mime-Version: 1.0
> Content-Type: multipart/mixed;
> 	boundary="----=_Part_180_14871489.1110211795868"
>
> ------=_Part_180_14871489.1110211795868
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: quoted-printable
>
>
> ------------------- forward ---------------
> > ---------------------------------
>
> ------=_Part_180_14871489.1110211795868
> Content-Type: application/octet-stream; name=attach.eml
> Content-Transfer-Encoding: 7bit
> Content-Disposition: attachment; filename=attach.eml
>
> Subject: Fw: Urgente
> Date: Sun, 6 Mar 2005 00:53:08 -0300
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> 	boundary="----=_NextPart_000_0330_01C521E6.DD6055C0"
>
> This is a multi-part message in MIME format.
>
> ------=_NextPart_000_0330_01C521E6.DD6055C0
> Content-Type: text/plain;
> 	charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
>
>
> ----- Original Message -----=20
> From: Dalva=20
> To: Adilson e outros....
> Sent: Saturday, March 05, 2005 4:26 PM
> Subject: Fw: Urgente
>
>
>
>
> ------=_NextPart_000_0330_01C521E6.DD6055C0
> Content-Type: text/html;
> 	charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
>
>
> ------=_NextPart_000_0330_01C521E6.DD6055C0--
>
>
> ------=_Part_180_14871489.1110211795868--
>
>








More information about the MIMEDefang mailing list