Return-Path header corrupt in virus reports

[Peter Valian]

Well, here's an example bounce:

Date: Thu, 25 Apr 2002 12:02:52 -0500
From: "MailScanner" <virusalert at southwestern.edu>
To: <leslie1 at colleges.org>
Subject: Warning: E-mail error detected
X-MailScanner: Found to be clean

Our virus detector failed to completely analyse a message you sent:-
   To: <haskell1 at southwestern.edu>, <morrell1 at rhodes.edu>,
<bonefas1 at colleges.org>, <MGarriso1 at Trinity.edu>
   Subject: Re: Montgomery
   Date: Thu Apr 25 12:02:52 2002
Any parts of the message that could not be analysed will not have been
delivered.

If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".

The virus detector said this about the message:
Report: Could not parse message g3PH2oK27075
--
MailScanner
Email Virus Scanner


Julian Field wrote:
> At 16:52 29/04/2002, you wrote:
>
>> If someone knows how to fix this please tell me.  I have been struggling
>> with it for several months now.  I believe these messages are lost.  Im
>> getting ready to abandon mailscanner because I don't see a way to fix
>> it.  I don't want to leave mailscanner but i cannot sit here and lose
>> mail.
>
>
> Can you explain why you think you might be losing mail because of this? I
> haven't seen any evidence of this happening.
>
>> Ben C. O. Grimm wrote:
>>
>>> On 27 Apr 2002 09:48:28 +0200, Mike Zanker <mike at ZANKER.ORG> wrote:
>>>
>>>
>>>> I've noticed that the postmaster virus report always seems to have the
>>>> same corrupt Return-Path header, e.g.
>>>>
>>>> Full headers are:
>>>> Return-Path: <?g>
>>>>
>>>> Is this a bug or my misconfiguration somewhere?
>>>
>>>
>>>
>>> It looks like soms kind of Sendmail emulation that doesn't quite work
>>> yet.
>>> In Sendmailese, the Return-Path has this format:
>>>
>>> H?P?Return-Path: <$g>
>>>
>>> --
>>> - Ben C. O. Grimm ----------------- Ben.Grimm at wirehub.net -
>>> - Wirehub! Internet Engineering - http://www.wirehub.net/ -
>>> - Wirehub! Backbone --- http://doema.wirehub.net/wirehub/ -
>>> - Private Ponderings ----------- http://www.bengrimm.net/ -
>>
>>
>>
>>
>> --
>> Peter Valian
>> Network & Systems Administrator
>> Southwestern University
>> Georgetown, Texas
>> 512.863.1586 office
>> 512.863.1605 fax
>> --
>
>
> --
> Julian Field                Teaching Systems Manager
> jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
> Tel. 023 8059 2817          University of Southampton
>                             Southampton SO17 1BJ



--
Peter Valian
Network & Systems Administrator
Southwestern University
Georgetown, Texas
512.863.1586 office
512.863.1605 fax
--