Mailscanner does not identify attachment in mail

[Julian Field]

It should have found the uu-encoded file. Have you got that feature  
switched on?
Look for "uu" or "UU" in MailScanner.conf.

On 4 May 2006, at 11:20, Koopmann, Jan-Peter wrote:

> Hi Julian,
>
> I just had an enduser complain that certain messages did not reach  
> him. I
> looked them up and they were all identified as spam. Why? Because the
> attachment in the message was not identified as such and therefore the
> uuencoded (or base64?) attachment triggered all sorts of SA rules.  
> The real
> question now is: Why did Mailscanner not pick up the attachment?
>
> The message body looks like this:
>
> -------------------
>
>
> RunJob Report PDCMFREP_B 04-May-2006 17:32:47 WAUST
> begin 664 PFLIST.pdf
> M)5!$1BTQ+C$*,2`P(&]B:@H\/`HO0W)E871O<B`H1&5V96QO<&5R(#(P,#`I
> M"B]#<F5A=&]R1&%T92`H5&AU($UA>2`P-"`P-3HS,SHU.2!032`R,#`V*0HO
> <lotsdeleted>
> `
> end
>
> -------------------
>
> Nothing special in the headers. This looks wrong to me but if this  
> message
> is delivered to Exchange/Outlook the attachment is decoded  
> correctly. But
> this now means that these sort of wrongly formatted attachments are  
> not
> discovered and therefore not scanned by MailScanner???
>
> Please help. I can put the exim spool files to a download location  
> if that
> helps you.
>
>
>
>
> Kind regards
>
> Jan-Peter Koopmann
> Dipl.-Wirtschaftsinformatiker
> Geschäftsführer
>
> --
> Seceidos GmbH&Co. KG       |  Tel: +49 6151 66843-43
> Robert-Bosch-Str. 7        |  Fax: +49 6151 66843-52
> 64293 Darmstadt / Germany  |  IAX: guest at voip.seceidos.de/43
> http://www.seceidos.de     |  SIP: 43 at voip.seceidos.de
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.