Russian text causing strangeness

[Bryan Oliver]

I have installed MailScanner and when I start the MailScanner service now
I am getting this entry in my maillog file:

Jul  7 10:35:08 mail postfix/qmgr[702]: warning: connect to transport
filter: Connection refused

Does anyone know what might be causing this?

Bryan




Dustin Baer <dustin.baer at IHS.COM>
Sent by: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
07/07/2004 10:27 AM
Please respond to
MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>


To
MAILSCANNER at JISCMAIL.AC.UK
cc

Subject
Russian text causing strangeness






Hi All,

MailScanner 4.27.7  (Also happens with 4.31.6)
Sendmail 8.12.10
Solaris 9

I wrote to the list a few weeks ago about this issue, but haven't had a
response.

Sometimes when Russian text is included in an email, some strange
Filetype checking quarantine behavior occurs in MailScanner.  Today, the
stored.filename.message.txt was quarantined as msg-6667-86.txt.  There
were no attachments with this email.

The MailScanner logs are:

Jul  7 03:24:03 mail1.ihs.com MailScanner[6667]: Filetype Checks: No
executables (i679NmWL010198 msg-6667-86.txt)
Jul  7 03:24:03 mail1.ihs.com MailScanner[6667]: Saved entire message to
/var/spool/MailScanner/quarantine/20040707/i679NmWL010198
Jul  7 03:24:04 mail1.ihs.com MailScanner[6667]: Saved infected
"msg-6667-86.txt" to
/var/spool/MailScanner/quarantine/20040707/i679NmWL010198

In testing, I have noticed that with 4.27.7, the
stored.filename.message.txt is quarantined as msg...txt.  With 4.31.6,
the actual email (df) is quarantined.

Any ideas?

The qf/df and msg-6667-86.txt are available in a zip file (2326 bytes)
at http://www.pcisys.net/~baer/MailScanner/i679NmWL010198.zip, if anyone
would like to take a look.

Thanks,

Dustin

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html