Message Size

Alan Fiebig mailscanner at ELKNET.NET
Thu Jul 3 22:04:19 IST 2003


Julian,

The sender of the oversized message is receiving the 'sender.error.report.txt' message, not the 'sender.filename.report.txt'.

Here is a copy of one I received when I tested the feature. Note that its the report about not being able to fully analyse the message, yet the '$report' variable at the bottom clearly shows it was the size filter that snagged it.

##################################################################
Subject: Warning: Your E-mail to training at elknet.net was rejected
X-ElkNetMailScrubber: generated

Our virus detector failed to completely analyse a message you sent:-
  To: training at elknet.net
  Subject: second large test
  Date: Thu Jul  3 13:40:45 2003
Any parts of the message that could not be analysed will not have been
delivered.

If you are using Microsoft Outlook, we strongly recommend you change your
outgoing message format from "Rich Text" to "HTML" or "Plain Text".

The virus detector said this about the message:
Report: Message is too large


--
ElkNet Postmaster
ElkNet E-Mail Scrubbing Service
##################################################################

MailScanner then removes the entire message, and sends the 'deleted.virus.message.txt' to the receipient, with a new attachment that contains an explaination regarding the removal of the attachment. The subject of this message has been modified with the {virus} tag.

Hope that helps!
-Alan


>Can you double check that you don't get the bad filename report please? It
>adds the same type of report to the message as the filename checks.
>
>To prove the point, the filename checks do this:
>             MailScanner::Log::InfoLog("Filename Checks: %s (%s)",
>                                       $logtext, $attach);
>             $message->{namereports}{$safename} .= "$usertext ($safename)\n";
>             $message->{nametypes}{$safename}   .= "f";
>             $counter++;
>             $message->{nameinfected}++;
>while the filetype checks do this:
>           MailScanner::Log::InfoLog("Filetype Checks: %s (%s)",
>                                     $logtext, $attach);
>           $message->{namereports}{$safename} .= "$usertext ($safename)\n";
>           $message->{nametypes}{$safename}   .= "f";
>           $counter++;
>           $message->{nameinfected}++;
>
>You may notice a slight similarity in the code...
>--
>Julian Field
>www.MailScanner.info
>Professional Support Services at www.MailScanner.biz
>MailScanner thanks transtec Computers for their support



More information about the MailScanner mailing list