[Mimedefang] Suspicious chars in header
Steffen Kaiser
skmimedefang at smail.inf.fh-bonn-rhein-sieg.de
Thu Nov 8 05:59:14 EST 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, 7 Nov 2007, scuba at centroin.com.br wrote:
> I've some complains about messages dropped due suspicious characters
> in header.
> I quarantined, some of then but could not identify the problem.
> How can I debug the MD process with quarantined message?
Look out for NUL characters (ASCII 0, \0) and lone CR (ASCII 13, \r) in
the mail.
I used to debug MIMEDefang by
cd /.../qdir
su mdefang -c "perl -d $(which mimedefang.pl) -f /etc/mail/mimedefang-filter $(pwd)"
But: You need a valid COMMANDS file (not there by default) and rename
ENTIRE_MESSAGE to INPUTMSG.
I copy the COMMANDS file there after quarantining the message.
Bye.
- --
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iQEVAwUBRzLsBOgJIbZtwg6XAQKBggf+MDNEk+SM1uuhORHelfg2dP9IpRevFTvL
CyAg5VN9+jP2A07t5owG5G3PA0fRAHmoOZsaqP1qHzd41IncJqdLBUwa47nqAERz
OEIx9XnVaH2P8Yh8W0QKZPvmHQDSEG3v4MspMubDeFe0tEWMUCqCod0XwJs4l7oK
TDqr4hTZDRMouvcka4eWKveAt5Jwj/dbmIJAQsUgViTNb8xMNetU5Gjo4X/im94p
g96xFmhhJM1ck68IhJLKf1OWFvX1D5eaqZDrQa01D+EFK7gImRWTj/7f7qgkvYVw
pHIUDNMNe0Brj0Zr67PHmpqAMOdsWoUsgWj2SDjSJNAVrO48nJ0Ssw==
=eWTm
-----END PGP SIGNATURE-----
More information about the MIMEDefang
mailing list