***Possibly Spam*** Re: Beta 4.39.1 released
Magda Hewryk
MHewryk at SYMCOR.COM
Thu Feb 17 20:08:00 GMT 2005
Again, URIBL_SBL detects it as spam..
OK, URIBL checks the body not the sender source. I probably will lower
URIBL_SBL to lower number.
spam, SpamAssassin (score=5.838, required 4.9, BAYES_00 -0.05, BIZ_TLD
2.29, J_CHICKENPOX_12 0.60, URIBL_SBL 3.00)"
Thanks,
Magda
Julian Field
<MailScanner at ECS.
SOTON.AC.UK> To
Sent by: MAILSCANNER at JISCMAIL.AC.UK
MailScanner cc
mailing list
<MAILSCANNER at JISC Subject
MAIL.AC.UK> ***Possibly Spam*** Re: Beta 4.39.1
released
02/17/2005 01:33
PM
Please respond to
MailScanner
mailing list
<MAILSCANNER at JISC
MAIL.AC.UK>
This is going to be the problem where Outlook (or OE) uses the wrong
quoting method when sending files. It tends to use "quoted-printable" if
the first few characters are printable characters. It should actually be
using Base64 as quoted-printable is pretty much entitled to change the
end-of-line sequence if it wants to.
Switching off the "Sign Clean Messages" for these addresses is usually
enough to stop it rebuilding the MIME message, which works around the
problem.
There isn't an easy way to solve this one.
Roger Jochem wrote:
>Did you have some time to find about the text files that changed files and
>format?
>
>Problem below...
>---------------------
>
>Hello, Julian
>
>Did you have a change to read my posts about the text files? I'm having
this
>problem with these particular text files and some binary files...
>
>I put the two problematic files in an web page, if somebody could make a
>test and see if it happens in your location too, would be intersting.
>
>The first one (file.prj) goes out from Outlook Express with 1,80 Kb, as an
>"ASCII text, with very long lines, with CRLF line terminators", and goes
to
>the destinatary with 1,93 Kb, as an "ASCII text, with very long lines".
>
>The second one is a bigger file, identified only as "data" by the file
>command. It goes out with 916 Kb, and goes to the destinatary with 952 Kb.
>Really strange...
>
>(The sizes of the files are the one presented in Outlook Express, I just
put
>these sizes here to show how the file sizes are diferent in my outbox and
>the destinatary inbox).
>
>The two files are at http://www.rudnick.com.br/files
>
>Regards
>
>Roger Jochem
>--------------
>
>----- Original Message -----
>From: "Julian Field" <MailScanner at ECS.SOTON.AC.UK>
>To: <MAILSCANNER at JISCMAIL.AC.UK>
>Sent: Thursday, February 17, 2005 1:33 PM
>Subject: Beta 4.39.1 released
>
>
>
>
>>I have just released the first beta of the next version of MailScanner,
>>4.39.1.
>>
>>There have been a little collection of relatively important fixes in
>>this release, especially for users of the phishing net who may have seen
>>occasional messages with the body of the HTML email appearing to be
>>mostly blank.
>>
>>Download it as usual from www.mailscanner.info.
>>
>>The full Change Log is this:
>>* New Features and Improvements *
>>- If the AttachmentWarning message put into a message is empty
>>
>>
>(zero-length)
>
>
>> then the empty attachment won't be added to the message at all.
>>- Added scanning of PE's by default to clamavmodule scanner.
>>- Added feature when IP address in a ruleset has all 4 numbers, so that a
>> full string match is done against the client IP, not a substring match.
>>- Added support for output from latest F-Prot.
>>
>>* Fixes *
>>- Corrected problem with <a> tags that have no text contents and no </a>.
>>- 2 minor typos in the Swedish reports.
>>- Changed check_MailScanner to check_mailscanner in cron job.
>>- Fixed problem where files with no extension, inside a zip file, were
>> extracted with ".dat" added onto the end of them.
>>- Fixed problem with phishing net being confused by some malformed URLs.
>>
>>--
>>Julian Field
>>www.MailScanner.info
>>Buy the MailScanner book at www.MailScanner.info/store
>>
>>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>>
>>
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
>Support MailScanner development - buy the book off the website!
>
>
>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner
mailing list