[Mimedefang] Truncated long MIME Content-Transfer-Encoding header

[Joseph Brennan]

--On Wednesday, October 26, 2005 22:38 -0600 Jon Fullmer 
<jon at jonfullmer.com> wrote:

> Some jerk has been sending me spam that has consistently triggered these
> messages within sendmail:
>
> Truncated long MIME Content-Transfer-Encoding header (length = 435)
> (possible attack)
>
> I haven't seen messages like this, well, probably ever.  Because of this,
> I suspect I can safely configure MIMEDefang to reject a message with a
> truncated long MIME header.  I studied the mimedefang-filter (and the
> example) and Googled, but I can't seem to see any way to do this.  Is
> there a way?


Where does this appear?  Syslog?  If so, we did not see any all day
yesterday (1.6 million), for what it's worth.  I've never heard of
this either.

Joseph Brennan
Columbia University Information Technology