Children and Mailscanner halting & atachments

Julian Field mailscanner at ecs.soton.ac.uk
Wed Mar 24 16:54:39 GMT 2004


Are you sure it doesn't contain a password-protected archive attachment?
Also, what version of MailScanner are you running? There was a bug related
to this in at least one of the betas, it may have been in others too.

At 16:37 24/03/2004, you wrote:
>On 24 Mar 04, at 16:12, Julian Field wrote:
>Thanks Julian & Kevin re Children
>Re attachments here is the header & message I get as sender (to my self)
>of the 10 attachments
>Header--
>MIME-Version: 1.0
>Subject: {Blocked Content} test
>Reply-to: hrobinson at harper-adams.ac.uk
>X-Confirm-Reading-To: hrobinson at harper-adams.ac.uk
>X-pmrqc: 1
>Priority: normal
>X-mailer: Pegasus Mail for Win32 (v3.11)
>X-HAUC-MailScanner-Information: Please contact the ISP for more information
>X-HAUC-MailScanner: Found to be infected
>X-HAUC-MailScanner-SpamCheck: not spam, SpamAssassin (score=- 3.3,
>required 5,
>         BAYES_01 -5.40, MIME_MISSING_BOUNDARY 1.33,
>         MSG_ID_ADDED_BY_MTA_2 0.79)
>X-HAUC-MailScanner-From: howard at harper-adams.ac.uk
>X-PMFLAGS: 570957952 0 1 Y024AF.CNM
>Content-Type: text/plain; charset="ISO-8859-1"; name="VirusWarning.txt"
>Content-Disposition: inline; filename="VirusWarning.txt"
>Content-Transfer-Encoding: quoted-printable
>
>Message
>Warning: This message has had one or more attachments removed
>Warning: (the entire message).
>Warning: Please read the "VirusWarning.txt" attachment(s) for more
>information.
>
>This is a message from the MailScanner E-Mail Virus Protection Service
>----------------------------------------------------------------------
>The original e-mail message contained potentially dangerous content,
>which has been removed for your safety.
>The content is dangerous as it is often used to spread viruses or to
>gain personal or confidential information from you, such as passwords or
>credit card numbers.
>If you wish to receive a copy of the original email, please e-mail
>helpdesk and include the whole of this message in your request.
>Alternatively, you can call them, with the contents of this message to
>hand when you call.
>
>At Wed Mar 24 16:21:17 2004 the content filters said:
>    MailScanner: Message contained password-protected archive
>
>Note to Help Desk: Look on the HAUC MailScanner in
>/var/spool/MailScanner/quarantine/20040324 (message i2OGKZ25032109).
>--
>
>Bye the way they do not have password protection.
>Total size is ~6mb. Sendmail set for 15mb limit.
>
>
>
>
> > >
> > >3) If I send multiple attachments I get {blocked content} if I send
> > >them separately they go through.
> > >I have maximum number of attachments set to 200 but am only
> > >attaching 10!
> >
> > What does the attachment report actually say? "{blocked content}" can be
> > created by a whole load of things, you need to be more specific. -- Julian
> > Field www.MailScanner.info MailScanner thanks transtec Computers for their
> > support
> >
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
>
>
>Regards
>
>Howard Robinson (Senior Technical Development Officer) Harper Adams
>University College Edgmond Newport Shropshire TF10 8NB UK
>
>E-mail: hrobinson at harper-adams.ac.uk Tel.  : +44(0)1952 820280 Via
>switchboard       : +44(0)1952 815253 Direct line Fax.  : +44(0)1952
>814783 College Web site
><http://www.harper-adams.ac.uk>http://www.harper-adams.ac.uk
><br>
>
></blockquote></x-html>


--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list