wrong "message/partial", was: How to block delivery of MAILER-DAEMON (<>) messages?

[Andreas Piper]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Thanks for your answers,

> period of time to alleviate the problem, go on.  If you have read the RFCs
> and still intend to block permanently, please find a replacement admin and
> resign your position.
>
I will honour the RFC (I really didn't think of the legitimate
non-delivery-reports when I saw the flood of messages for faked recipients).

> Second, the "deliver cleaned messages" option only applies to virus
> infected emails that have been cleaned. It won't affect non-virus messages.

Some further analysis shows, that all these messages are from
MAILER-DAEMON at bigfoot.com
These messages are not virus-infected, but they are cleaned by MailScanner,
as they contain the line
Content-Type: message/partial
in the message-body and my MailScanner.conf contains
Allow Partial Messages = no

As I have further set
Dangerous Content Scanning = yes
and
Deliver Cleaned Messages = yes
the message-body is replaced by the Deleted Bad Content Message Report and the
cleaned message is delivered (which creates some confusion with my users).

The main problem here seems to be, that the line
Content-Type: message/partial
is not used correctly in these messages, as RFC 2046 states that
'Three parameters must be specified in the Content-Type field of type
   "message/partial":' (which are "id", "number" and "total").
These parameters are not existing in these messages.

I now made a small change in SweepContent.pm (find attached) to get
MailScanner to check for the existence of these parameters, and only clean
the message if they exist.
With such a change, the messages will contain their original content, and can
therefore more easily be recognized by the users, whereas true partial
messages will still be recognized.

Any comments on this?

Andreas
--
________________________________________________________________________
Dr. Andreas Piper, Hochschulrechenzentrum der Philipps-Univ. Marburg
          Hans-Meerwein-Strasse, 35032 Marburg, Germany
Phone: +49 6421 28-23521  Fax: -26994  Email: piper at HRZ.Uni-Marburg.DE

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

    [ Part 2, Text/X-DIFF (charset: ISO-8859-1 "Latin 1 (Western ]
    [ Europe)") (Name: "SweepContent.patch")  19 lines. ]
    [ Unable to print this part. ]