Issue with Blackberry
Gerhard Mourani
gmourani at prival.ca
Wed May 9 15:09:49 IST 2007
Yes, sorry I've sent the wrong message, this one is another problem and it's related to remote qmail server saying -> 'Disallowed breakage found in header name - potential virus' when receiving emails from this domain running MailScanner.
-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of --[ UxBoD ]--
Sent: Wednesday, May 09, 2007 10:02 AM
To: MailScanner discussion
Subject: RE: Issue with Blackberry
The headers do not look right to me, and I reckon that funny content you are seeing is the .xls attachment. I know you say that it has been sent via a Blackberry but the headers are for Outlook V11 ?
On Wed, 9 May 2007 09:26:31 -0400, "Gerhard Mourani" <gmourani at prival.ca> wrote:
> Here what users sent to me. Also this is what I've in the ->
> /etc/postfix/header_checks file
> /^Received: (.*?) by eliteclassics.com(.*?)/ REJECT
> /^Received:/ HOLD
>
> Now the headers:
> A problem was found in an Email message you sent.
> This Email scanner intercepted it and stopped the entire message
> reaching its destination.
>
> The problem was reported to be:
>
> Disallowed breakage found in header name - potential virus
>
>
> Please contact your IT support personnel with any queries regarding this
> policy.
>
>
> Your message was sent with the following envelope:
>
> MAIL FROM: carla.redman at elitegroupinc.ca
> RCPT TO: joshua.levin at myexchangehosting.net
>
> ... and with the following headers:
>
> ---
> MAILFROM: carla.redman at elitegroupinc.ca
> Delivered-To: jwlevinp-joshua.levin at jwlevinpartners.com
> Received: (qmail 55802 invoked from network); 4 May 2007 18:37:42 -0000
> Received: from unknown (HELO mail.eliteclassics.com) (149.99.191.243)
> by host355.ipowerweb.com with SMTP; 4 May 2007 18:37:42 -0000
> Received: from EXECDanny (office.eliteclassics.com [149.99.191.242])
> by mail.eliteclassics.com (Postfix) with ESMTP id CEC964DEC
> for <joshua.levin at jwlevinpartners.com>; Fri, 4 May 2007 14:40:18
> -0400 (EDT)
> Return-Receipt-To: "Carla Redman" <carla.redman at elitegroupinc.ca>
> Reply-To: <carla.redman at elitegroupinc.ca>
> From: "Carla Redman" <carla.redman at elitegroupinc.ca>
> To: "'Levin, Joshua'" <joshua.levin at jwlevinpartners.com>
> References:
> <!&!AAAAAAAAAAAYAAAAAAAAAA//HCPUPWlOnwoLNnkLF1/CgAAAEAAAAIJKY+ZCvJhCqwOpsTBc
> Ps0BAAAAAA==@elitegroupinc.ca>
> <435DF58A933BA74397B42CDEB8145A860B8C4AE3 at ex9.hostedexchange.local>
> Subject: RE: feb 07 flights .xls
> Date: Fri, 4 May 2007 14:45:04 -0400
> Organization: Elite Group
> Message-ID:
> <!&!AAAAAAAAAAAYAAAAAAAAAA//HCPUPWlOnwoLNnkLF1/CgAAAEAAAADnS5OzqJ1hKjJ6btvlw
> nvYBAAAAAA==@elitegroupinc.ca>
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> boundary="----=_NextPart_000_0003_01C78E5A.CD761FE0"
> X-Mailer: Microsoft Office Outlook 11
> Thread-Index:
> AceCyu12JEluHxWIQ7ClFI22mBkHtgAghwiAAA0iz+AAAC8ZAAK8H9XgAAIRniA=
> In-Reply-To:
> <435DF58A933BA74397B42CDEB8145A860B8C4AE3 at ex9.hostedexchange.local>
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
> Disposition-Notification-To: "Carla Redman"
> <carla.redman at elitegroupinc.ca>
> X-Elite Group, Inc.-MailScanner: Found to be clean
> X-Elite Group, Inc.-MailScanner-From: carla.redman at elitegroupinc.ca
> X-Spam-Status: No
>
> Thanks,
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of --[ UxBoD
> ]--
> Sent: Wednesday, May 09, 2007 9:08 AM
> To: MailScanner discussion
> Subject: Re: Issue with Blackberry
>
> Would be useful to see the actual headers, especially the MIME section.
>
> On Wed, 9 May 2007 08:38:05 -0400, "Gerhard Mourani" <gmourani at prival.ca>
> wrote:
>> Hello,
>>
>>
>>
>> I'm using MailScanner + Postfix + SpamAssassin on Linux and having
> strange
>> issues with email coming from blackberry servers, here how the received
>> email look like:
>>
>>
>>
>> Subject: Re: Hand Mixer Trial-Produce Report
>>
>>
>>
>> \Ib?HTjy?Z.hm%yXxj?'p?'wJI+{E+.1I?U)?g?g*"(tjdj?6V??6 R w&FR
> FR&GbV
>> v F2fVC
>> ________________________________
>>
>> 6wB 6VRB
>>
>>
>>
>> &W&o??G2 W&vVB 6RVVFVBf"7[1] FW7Fp??F0??
>> ________________________________
>>
>> V&V6? &GV7B
>> ________________________________
>>
>> vW"
>> ________________________________
>>
>> 6V6
>> ________________________________
>>
>> 2?F&V7B?S
>> ________________________________
>>
>> SB
>> ________________________________
>>
>> ##r
>> ________________________________
>>
>> s3r[1]??&v
>> ________________________________
>>
>> W76vR?g&?[1]$FfBVr"
>> ________________________________
>>
>> FfBVt VIFVw&W26?FFSGVR
>> ________________________________
>>
>> ________________________________
>>
>> ________________________________
>>
>> #
>> ________________________________
>>
>> ________________________________
>>
>> r
>> ________________________________
>>
>> ##?F&fW&F"
>> ________________________________
>>
>> fW&FF?VIFVw&W26&W&2&W&"
>> ________________________________
>>
>> W&2 &W&VIFVw&W26?63&FFv""
>> ________________________________
>>
>> FFv$VIFVw&W26%6Tr"
>> ________________________________
>>
>> 6Rt 6V626&V&V"
>> ________________________________
>>
>> V&V6 6V626'6G&'W&F"
>> ________________________________
>>
>> 6G&'W&FVIFVw&W26&VWB"
>> ________________________________
>>
>> VWBGW&W6vTVIFVw&W26&VFV"
>> ________________________________
>>
>> VFV6 VVIFVw&W266TVIFVw&W26&V'F"
>> ________________________________
>>
>> zV'FVIFVw&W26$FR"
>> ________________________________
>>
>> zFRWG64VIFVw&W 26&FfBGW&"
>> ________________________________
>>
>> FfBGW&VIFVw&W26%F"
>> ________________________________
>>
>> FTVIFVw&W26'o R"
>> ________________________________
>>
>> oTVIFVw&W26&66r"
>> ________________________________
>>
>> ?66tVIFVw&W26&'R"
>> ________________________________
>>
>> 'TVIFVw&W26$66R"
>> ________________________________
>>
>> 66VF v?v6%6&?R"
>> ________________________________
>>
>> F?6$6"
>> ________________________________
>>
>> ?6Fv?v6&VfVr"
>> ________________________________
>>
>> VfVtF?6?7V&V7C
>> ________________________________
>>
>> B
>> ________________________________
>>
>> ?W"G& &GV6R&W'@??FV"
>> ________________________________
>>
>> fW&FW&2V6R 6VRB?W" G&
>>
>>
>>
>> &GV7" &W'B7V7F &W7VB2fVB&W7B &Vv&G2FfBVpVIFR
>> ________________________________
>>
>> w&W[1]
>> ________________________________
>>
>> 2
>> ________________________________
>>
>> 6
>> ________________________________
>>
>> ff6P&S
>> ________________________________
>>
>> b3
>> ________________________________
>>
>> ________________________________
>>
>> cs#cVâVIFW2?6
>> ________________________________
>>
>> c26?
>> ________________________________
>>
>> FVIFW2?6
>> ________________________________
>>
>> c26R#FfBVtVIFVw&W26
>> ________________________________
>>
>> FFfBVtVIFVw&W26vV'6FS wwrVIFVw&W26
>> ________________________________
>>
>> ?GG
>> ________________________________
>>
>> wwrVIFVw&W26%F2Vf76?R6F26fFVFf&FFVFVBof" FR W6Rb FR W'6VB&fR
>
>> ________________________________
>>
>> b R&RB FRFVFVB &V6VBb F2Vf76?R" FRVVR"vVB
> &W76&Rf"FVIfW&rB
>> F FRFVFVB &V6VB R&RW&V'FfVB FBF76V?F"6 |*[1]b F2Vf76?\*[1]2
>> 7G&7Fo
>>
>>
>>
>> &&FVB
>> ________________________________
>>
>> b RfR &V6VfVB F2Vf76?RW'&" V6R &WGW& F W2C
>> ________________________________
>>
>> sR6RGR
>> ________________________________
>>
>> g&W&R
>> ________________________________
>>
>> G&R
>> ________________________________
>>
>> G&VVV&V2*[1]
>> ________________________________
>>
>> 6F
>> ________________________________
>>
>> 4"
>> ________________________________
>>
>> 5,*[1]'fC
>> ________________________________
>>
>> SB?
>> ________________________________
>>
>> rS#s " F FR 6VFW"w2VFG&W72F6FVB&fR
>>
>>
>>
>> Gerhard,
>>
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>>
>>
>>
> --
> --[ UxBoD ]--
> // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
> // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8
> // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8
> // Phone: +44 (0) 845 869 2749 SIP: uxbod at sip.splatnix.net
>
>
> --
> This message has been scanned for viruses and dangerous content by
> MailScanner, and is
> believed to be clean.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8
// Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8
// Phone: +44 (0) 845 869 2749 SIP: uxbod at sip.splatnix.net
--
This message has been scanned for viruses and dangerous content by MailScanner, and is
believed to be clean.
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner
mailing list