Russian text causing strangeness

Dustin Baer dustin.baer at IHS.COM
Wed Jul 7 15:27:55 IST 2004


Hi All,

MailScanner 4.27.7  (Also happens with 4.31.6)
Sendmail 8.12.10
Solaris 9

I wrote to the list a few weeks ago about this issue, but haven't had a
response.

Sometimes when Russian text is included in an email, some strange
Filetype checking quarantine behavior occurs in MailScanner.  Today, the
stored.filename.message.txt was quarantined as msg-6667-86.txt.  There
were no attachments with this email.

The MailScanner logs are:

Jul  7 03:24:03 mail1.ihs.com MailScanner[6667]: Filetype Checks: No
executables (i679NmWL010198 msg-6667-86.txt)
Jul  7 03:24:03 mail1.ihs.com MailScanner[6667]: Saved entire message to
/var/spool/MailScanner/quarantine/20040707/i679NmWL010198
Jul  7 03:24:04 mail1.ihs.com MailScanner[6667]: Saved infected
"msg-6667-86.txt" to
/var/spool/MailScanner/quarantine/20040707/i679NmWL010198

In testing, I have noticed that with 4.27.7, the
stored.filename.message.txt is quarantined as msg...txt.  With 4.31.6,
the actual email (df) is quarantined.

Any ideas?

The qf/df and msg-6667-86.txt are available in a zip file (2326 bytes)
at http://www.pcisys.net/~baer/MailScanner/i679NmWL010198.zip, if anyone
would like to take a look.

Thanks,

Dustin

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list