[Mimedefang] Suspicious chars in header

[Steffen Kaiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 7 Nov 2007, scuba at centroin.com.br wrote:

> 	I've some complains about messages dropped due suspicious characters 
> in header.
> 	I quarantined, some of then but could not identify the problem.
> 	How can I debug the MD process with quarantined message?

Look out for NUL characters (ASCII 0, \0) and lone CR (ASCII 13, \r) in 
the mail.

I used to debug MIMEDefang by

cd /.../qdir
su mdefang -c "perl -d $(which mimedefang.pl) -f /etc/mail/mimedefang-filter $(pwd)"

But: You need a valid COMMANDS file (not there by default) and rename 
ENTIRE_MESSAGE to INPUTMSG.
I copy the COMMANDS file there after quarantining the message.

Bye.

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBRzLsBOgJIbZtwg6XAQKBggf+MDNEk+SM1uuhORHelfg2dP9IpRevFTvL
CyAg5VN9+jP2A07t5owG5G3PA0fRAHmoOZsaqP1qHzd41IncJqdLBUwa47nqAERz
OEIx9XnVaH2P8Yh8W0QKZPvmHQDSEG3v4MspMubDeFe0tEWMUCqCod0XwJs4l7oK
TDqr4hTZDRMouvcka4eWKveAt5Jwj/dbmIJAQsUgViTNb8xMNetU5Gjo4X/im94p
g96xFmhhJM1ck68IhJLKf1OWFvX1D5eaqZDrQa01D+EFK7gImRWTj/7f7qgkvYVw
pHIUDNMNe0Brj0Zr67PHmpqAMOdsWoUsgWj2SDjSJNAVrO48nJ0Ssw==
=eWTm
-----END PGP SIGNATURE-----