[Mimedefang] Suspicious chars in header

Steffen Kaiser skmimedefang at smail.inf.fh-bonn-rhein-sieg.de
Mon Nov 12 10:46:55 EST 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 12 Nov 2007, Marcelo Souza wrote:

> 	Is there any way to regenerate the COMMANDS file with quarantined
> message?

Well, I don't know, in combination with the sendmail logs:
it's line-oriented file, with one sendmail milter item per line, e.g.:

S<root at ux-2s11.inf.fh-bonn-rhein-sieg.de>
=_ localhost%20[127.0.0.1]
=auth_author /dev/null at ux-2s11.inf.fh-bonn-rhein-sieg.de
=daemon_name MSA
=i j447jBqn009201
=if_addr 127.0.0.1
=if_name localhost
=j ux-2s11.inf.fh-bonn-rhein-sieg.de
=mail_addr root
=mail_host
=mail_mailer local
=tls_version TLSv1/SSLv3
Qj447jBqn009201
Hlocalhost
I127.0.0.1
Eux-2s11.inf.fh-bonn-rhein-sieg.de
R</dev/null at example.com> local ? /dev/null
X<200505040745.j447jB16009190 at messageid>
F

Lone "F" marks EOF, each R is a env recipient, = are sendmail macros, S is 
env sender, Q sendmail queue ID, X message ID, ...

Bye,

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBRzh1cegJIbZtwg6XAQK7rwf/V0VjrmjAnjvtVnMvGLAqsL7XnOLfjXV1
YFphGz0vxr6WF2po/Do5QyA4trg5Ia6KFb0XxIWQJepE86B9jStNMffgEJ055Jkx
tKK3Sg2SweIDc+4UAKP93d/8d5v1A5WcKWWgM7Fq3owrfm53w3DPE53K7UQVYmCx
730Ua+rZ2WqJLuMXrvfFk4VkkPsjXuQhM2Ra5KVdRrTryaO5k0+eL/5z8Ezgjx79
0RY3UZdktwa5phftaGXd6AS61u9OIYZJSGIMAyOdu7UGnpWOTagdohmfg0HqDaRQ
hsAZhxdDIS4IOhPrCkH7YzqZQAk4iyoQsP4p4ODT2tN8kmeSvN7XTw==
=Iyl7
-----END PGP SIGNATURE-----



More information about the MIMEDefang mailing list