DSNs from bigfoot.com are quarantined

Mark Sapiro mark at msapiro.net
Sat Aug 23 20:02:00 IST 2008


DSN's from bigfoot.com have the following structure
----------------------------------------------
Received: ...
Date: ...
From: ...
Message-Id: ...
To: ...
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
        boundary="200808230226058"
Subject: Returned mail: Requested action not taken: mailbox unavailable
Auto-Submitted: auto-generated (failure)

This is a MIME-encapsulated message

--200808230226058

text description of failure

--200808230226058
Content-Type: message/delivery-status

delivery status report

--200808230226058
Content-Type: message/partial

headers of original message

--200808230226058--
----------------------------------------------

When this message is scanned, Mailscanner reports

The following e-mails were found to have: Other Bad Content Detected

    Sender: <>
IP Address: 211.115.216.225
 Recipient: listname-bounces at example.com
   Subject: Returned mail: Requested action not taken: mailbox unavailable
 MessageID: 8ADB76900BB.E507A
Quarantine: /var/spool/MailScanner/quarantine/20080823/8ADB76900BB.E507A
    Report: MailScanner: Fragmented messages cannot be scanned and are
removed


and the message delivered to the recipient has "the entire message"
removed and replaced with the attachment warning.

If only the Content-Type: message/partial part were removed, it would
still be possible for automated bounce recognition software to recognize
the DSN. Is there some reason why the entire message needs to be removed
and not just the message/partial part?

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan



More information about the MailScanner mailing list