Mailscanner does not identify attachment in mail

[Martin Hepworth]

JP

It's a personal certificate file (guess who uses Outleek as their MUA ;-(

The 'file-typeing' is usually called out to the unix 'file' command, but I
guess you could but in an entry into the file.names.conf for a .p2s
file..???

--
Martin Hepworth 
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Koopmann, Jan-Peter
> Sent: 04 May 2006 11:20
> To: MailScanner discussion
> Subject: Mailscanner does not identify attachment in mail
> 
> Hi Julian,
> 
> I just had an enduser complain that certain messages did not reach him. I
> looked them up and they were all identified as spam. Why? Because the
> attachment in the message was not identified as such and therefore the
> uuencoded (or base64?) attachment triggered all sorts of SA rules. The
> real
> question now is: Why did Mailscanner not pick up the attachment?
> 
> The message body looks like this:
> 
> -------------------
> 
> 
> RunJob Report PDCMFREP_B 04-May-2006 17:32:47 WAUST
> begin 664 PFLIST.pdf
> M)5!$1BTQ+C$*,2`P(&]B:@H\/`HO0W)E871O<B`H1&5V96QO<&5R(#(P,#`I
> M"B]#<F5A=&]R1&%T92`H5&AU($UA>2`P-"`P-3HS,SHU.2!032`R,#`V*0HO
> <lotsdeleted>
> `
> end
> 
> -------------------
> 
> Nothing special in the headers. This looks wrong to me but if this message
> is delivered to Exchange/Outlook the attachment is decoded correctly. But
> this now means that these sort of wrongly formatted attachments are not
> discovered and therefore not scanned by MailScanner???
> 
> Please help. I can put the exim spool files to a download location if that
> helps you.
> 
> 
> 
> 
> Kind regards
> 
> Jan-Peter Koopmann
> Dipl.-Wirtschaftsinformatiker
> Geschäftsführer
> 
> --
> Seceidos GmbH&Co. KG       |  Tel: +49 6151 66843-43
> Robert-Bosch-Str. 7        |  Fax: +49 6151 66843-52
> 64293 Darmstadt / Germany  |  IAX: guest at voip.seceidos.de/43
> http://www.seceidos.de     |  SIP: 43 at voip.seceidos.de


**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************