wrong detection of file?

L.P.H. van Belle belle at bazuin.nl
Tue May 28 14:43:24 UTC 2019


Hai Shawn, 


Have you ever seen something like this. 

I just e-mailed a file, with a name as shown below. 
SSL Server Test hostname.example.com (Powered by Qualys SSL Labs).pdf
 
The resport shows : 
Message: Executable DOS/Windows programs are dangerous in email (SSL Server Tes.com)
And its shown in mailwatch as :  application/pdf; charset=binary

Now the thing i dont get here is, how is the name "SSL Server Tes.com" constructed from
The name : SSL Server Test hostname.example.com (Powered by Qualys SSL Labs).pdf

I only change the hostname and domain here, i kept the format exact the same.

Greetz, 

Louis



More information about the MailScanner mailing list