malformed MIME headers

[Steve Freegard]

Hi Rob,

I remember this being discussed on the list once before:

X-fleetone.com-MailScanner-Information:
X-fleetone.com-MailScanner:

Remove the '.' in these headers and it should start working - there was a
detailed discussion on whether or not this is RFC compliant, the consensus
was that it is and the problem was actually a bug in Symantec's software.

Julian made a note about this in MailScanner.conf after this problem
occurred:

[root at hoshi MailScanner]# grep -i symantec MailScanner.conf -B7 -A2

# Enter a short identifying name for your organisation below, this is
# used to make the X-MailScanner headers unique for your organisation.
# Multiple servers within one site should use an identical value here
# to avoid adding multiple redundant headers where mail has passed
# through several servers within your organisation.
# RULE: It must not contain any spaces!
# Note: Some Symantec scanners complain (incorrectly) about "."
# ***** characters appearing in the names of headers.
%org-name% = LBS

Kind regards,
Steve.

--
Steve Freegard
Systems Manager
Littlehampton Book Services Ltd.

> -----Original Message-----
> From: Rob Freeman [mailto:sysadmin at FLEETONE.COM]
> Sent: 14 April 2004 14:15
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: malformed MIME headers
>
>
> Sorry about the delay, had a server hard drive crash on me.
>
> Here is the header of the message in question.
>
> From autoprocess at xxxxxx.com  Wed Apr 14 08:12:12 2004
> Return-Path: <autoprocess at xxxxxxx.com>
> Received: from mail.fleetone.com (mail.fleetone.com [66.236.227.91])
>     by mail.robhq.com (8.12.10/8.12.10) with SMTP id i3EDBE7S010990
>     for <rob at robhq.com>; Wed, 14 Apr 2004 08:11:14 -0500
> Received: from fleetone_mail.fleetone.com (fleetone_mail.fleetone.com
> [172.16.40.96])
>     by mail.fleetone.com (8.12.10/8.12.10) with SMTP id
> i3ED73FE029164;
>     Wed, 14 Apr 2004 08:07:05 -0500
> X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
> Content-Class: urn:content-classes:message
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
>     boundary="----_=_NextPart_001_01C42221.F8C17670"
> Subject: FleetOne Merchant Settlement Report From
> TransPlatinum Service
> Corp.
> Date: Wed, 14 Apr 2004 08:11:17 -0500
> Message-ID:
> <8BFA104B8AE4324EB5E32C93483A3DC307FF40B4 at fleetone_mail.fleetone.com>
> X-MS-Has-Attach: yes
> X-MS-TNEF-Correlator:
> Thread-Topic: FleetOne Merchant Settlement Report From
> TransPlatinum Service
> Corp.
> Thread-Index: AcQhcnz9FtBnI8X1TymBfGwsx2tEZA==
> From: "autoprocess" <autoprocess at fleetone.com>
> To: <saraha at xxxx.com>, "Robin  Jones" <rjones at xxxxxxx.com>
> Cc: <rob at xxxx.com>
> X-fleetone.com-MailScanner-Information: Please contact
> postmaster at fleetone.com for more information
> X-fleetone.com-MailScanner: Found to be clean
> X-robhq-MailScanner-Information: Please contact the ISP for
> more information
> X-robhq-MailScanner: Found to be clean
> X-robhq-MailScanner-SpamScore: s
> X-MailScanner-From: autoprocess at xxxxxxx.com
> Status: R
>
> ----- Original Message -----
> From: "Julian Field" <mailscanner at ECS.SOTON.AC.UK>
> To: <MAILSCANNER at JISCMAIL.AC.UK>
> Sent: Wednesday, April 14, 2004 7:35 AM
> Subject: Re: malformed MIME headers
>
>
> > Any more information on what the problem actually is?
> > The Symantec page merrily states that the messages aren't
> compliant, but
> in
> > what way?
> >
> > At 12:17 14/04/2004, you wrote:
> > >We are running MailScanner 4.29-7 as a front end to our
> Exchange server
> for
> > >about the last 2 weeks after replacing our xwall box with
> it.  Since the
> > >move we have one customer who is getting error messages
> from us about
> > >malformed MIME headers on his Symantec AntiVirus for SMTP
> Gateway.  He
> sent
> > >this link with the information:
> > >
> >
> >http://service1.symantec.com/SUPPORT/ent-gate.nsf/dc983c4134c
90dfd88256c0e0
0592490/4d9b4fb636faa23d88256c78005fe2cb?OpenDocument&src=bar_sch_nam
> >
> >The emails in ? do have a .htm attachment, as that is how some of our
> >customers receive their invoices from us.
> >
> >Is there anything on our end we can do to get emails to him?
> >
> >Thanks
> >
> >Rob
>
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.