Disarm HTML in message will disarm / Blank Body

[Jamey Nelson]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Update:

Disabling the phishing feature stopped this message from being displayed in
the logs, and I believe would stop the blank bodies, however, I would really
prefer to use the phishing feature.


Running on
Linux gandalf.teamlightning.com 2.4.20-31.9smp #1 SMP Tue Apr 13 17:40:10 EDT
2004 i686 i686 i386 GNU/Linux
This is Red Hat Linux release 9 (Shrike)
This is Perl version 5.008000 (5.8.0)

This is MailScanner version 4.35.11
Module versions are:
1.00    AnyDBM_File
1.14    Archive::Zip
1.01    Carp
1.119   Convert::BinHex
1.00    DirHandle
1.04    Fcntl
2.71    File::Basename
2.05    File::Copy
2.01    FileHandle
1.05    File::Path
0.13    File::Temp
1.27    HTML::Entities
3.36    HTML::Parser
2.28    HTML::TokeParser
1.20    IO
1.09    IO::File
1.122   IO::Pipe
3.05    MIME::Base64
5.415   MIME::Decoder
5.415   MIME::Decoder::UU
5.415   MIME::Head
5.415   MIME::Parser
3.03    MIME::QuotedPrint
5.415   MIME::Tools
0.09    Net::CIDR
1.05    POSIX
1.75    Socket
0.03    Sys::Syslog
1.02    Time::localtime

Optional module versions are:
1.806   DB_File
1.05    Digest
1.01    Digest::HMAC
2.20    Digest::MD5
2.10    Digest::SHA1
0.44    Inline
0.13    Mail::ClamAV
2.64    Mail::SpamAssassin
1.997   Mail::SPF::Query
0.15    Net::CIDR::Lite
0.48    Net::DNS
missing Net::LDAP
1.94    Parse::RecDescent
missing SAVI
1.2     Sys::Hostname::Long
2.26    Test::Harness
0.47    Test::Simple
1.89    Text::Balanced
1.31    URI



On Friday 12 November 2004 15:36, Jamey Nelson wrote:
> In my MailScanner.conf file, there is nothing set to disarm any HTML,
> however, I'm getting this in my log files:
>
> Nov 12 15:30:48 gandalf MailScanner[32548]: Content Checks: Detected and
> will disarm HTML message in iACKUdCM032630
>
> I believe this is also causing another problem I'm having. It seems that
> some messages are getting through with the HTML bodies blank, however, the
> text body portion is still in place.
>
> Any ideas?
>
>
>
> (Log Excerpt Below)
>
> Nov 12 15:30:48 ccc MailScanner[32548]: Virus and Content Scanning:
> Starting Nov 12 15:30:48 ccc MailScanner[32548]: Content Checks: Detected
> and will disarm HTML message in iACKUdCM032630
> Nov 12 15:30:48 ccc MailScanner[32548]: Uninfected: Delivered 1 messages
> Nov 12 15:30:50 ccc MailScanner[32609]: New Batch: Scanning 1 messages,
> 13348 bytes
> Nov 12 15:30:52 ccc MailScanner[32665]: Using locktype = flock
> Nov 12 15:30:57 ccc MailScanner[32609]: Spam Checks: Found 1 spam messages
> Nov 12 15:30:58 ccc MailScanner[32609]: Virus and Content Scanning:
> Starting Nov 12 15:30:58 ccc MailScanner[32609]: Content Checks: Detected
> and will disarm HTML message in iACKUUCM032587
> Nov 12 15:30:58 ccc MailScanner[32609]: Uninfected: Delivered 1 messages
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!