Detected HTML-specific exploits and the message is lost ?

[Steen, Glenn]

    [ The following text is in the "Windows-1252" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

AFAICS they should be wherever you put viruses and other bad content...
If you store, then look in the quarantine;)

-- Glenn


-----Original Message-----
From:   MailScanner mailing list on behalf of Venkata Achanta
Sent:   Fri 2/4/2005 11:34 PM
To:     MAILSCANNER at JISCMAIL.AC.UK
Cc:	
Subject:        Detected HTML-specific exploits and the message is lost ?
Looking at the logs there is nothing about what happened after the content
checks and the users are complaining that they are missing e-mails

root at test test # grep "j13NaAhx006236" /var/log/maillog.1
Feb  3 15:36:11 sendmail[6236]: j13NaAhx006236: from=<travel at expedia.com>,
size=48073, class=0, nrcpts=1, msgid=<200502032336.j13NaAhx006236 at xyz.com>,
proto=ESMTP, daemon=MTA, relay=smtp.expedia.com [216.251.115.225]
Feb  3 15:36:11 sendmail[6236]: j13NaAhx006236: to=<barrett at xyz.com>,
delay=00:00:01, mailer=relay, pri=78073, stat=queued
Feb  3 15:36:14 MailScanner[13718]: Message j13NaAhx006236 from
216.251.115.225 (travel at expedia.com) is whitelisted
Feb  3 15:36:19 MailScanner[13718]: Content Checks: Detected HTML-specific
exploits in j13NaAhx006236


I'm MailScanner version 4.35.11, i know i have to upgrade and we are in the
process. but still where are these e-mails going,did we loose them already?

Please advise

Thanks

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!