ANNOUNCE: Version 3.20-1 released
Stephane.Lentz at ANSF.ALCATEL.FR
Sat Jun 15 00:01:59 IST 2002
On Fri, Jun 14, 2002 at 11:08:25PM +0200, Ben C. O. Grimm wrote:
> One question though. One of our clients is running TrendMicro on his mail
> after receiving mail from our mailservers (which are all running
> FreeBSD/Perl5/Mailscanner/McAfee). This one seems to slip through on a
> consistent basis:
> Is it McAfee or Mailscanner (or a Perl-Mime module) that keeps missing this
> one? It is probably one of those curiously malformed attachments designed
> to fool the Outlook parser (if it deserves to be called that).
=> Yes, I heard that some PE_MAGISTR.A variants come in some
malformed MIME encoded message (that can be decoded by Outlook
though). I don't remember where exactly though. Anybody knows
what kind of incorrect Mime stuff is used (double headers or
\r only or something else) ?
Ben, BTW have you applied David F Skoll 's patch for Mime::Tools ?
PS: adding support in Mailscanner for Trend Micro vscan
(included in Interscan or the Free filescanner) should be
great. I once had a look at it quickly but couldn't figure out
all the code changes. Maybe in the future I will have a look at
it again or somebody else (Nick ?) will. The tricky port is that
the exit codes are not well documented.
Stephane Lentz / Alcanet International - Internet Services
More information about the MailScanner