Mailscanner does not identify attachment in mail

[Koopmann, Jan-Peter]

Hi Julian,

I just had an enduser complain that certain messages did not reach him. I
looked them up and they were all identified as spam. Why? Because the
attachment in the message was not identified as such and therefore the
uuencoded (or base64?) attachment triggered all sorts of SA rules. The real
question now is: Why did Mailscanner not pick up the attachment?

The message body looks like this:

-------------------


RunJob Report PDCMFREP_B 04-May-2006 17:32:47 WAUST
begin 664 PFLIST.pdf
M)5!$1BTQ+C$*,2`P(&]B:@H\/`HO0W)E871O<B`H1&5V96QO<&5R(#(P,#`I
M"B]#<F5A=&]R1&%T92`H5&AU($UA>2`P-"`P-3HS,SHU.2!032`R,#`V*0HO
<lotsdeleted>
`
end

-------------------

Nothing special in the headers. This looks wrong to me but if this message
is delivered to Exchange/Outlook the attachment is decoded correctly. But
this now means that these sort of wrongly formatted attachments are not
discovered and therefore not scanned by MailScanner???

Please help. I can put the exim spool files to a download location if that
helps you.




Kind regards

Jan-Peter Koopmann
Dipl.-Wirtschaftsinformatiker
Geschäftsführer

--
Seceidos GmbH&Co. KG       |  Tel: +49 6151 66843-43
Robert-Bosch-Str. 7        |  Fax: +49 6151 66843-52
64293 Darmstadt / Germany  |  IAX: guest at voip.seceidos.de/43
http://www.seceidos.de     |  SIP: 43 at voip.seceidos.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3104 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060504/d2ace6ea/smime.bin