wrong detection of file?
L.P.H. van Belle
belle at bazuin.nl
Tue May 28 14:43:24 UTC 2019
Hai Shawn,
Have you ever seen something like this.
I just e-mailed a file, with a name as shown below.
SSL Server Test hostname.example.com (Powered by Qualys SSL Labs).pdf
The resport shows :
Message: Executable DOS/Windows programs are dangerous in email (SSL Server Tes.com)
And its shown in mailwatch as : application/pdf; charset=binary
Now the thing i dont get here is, how is the name "SSL Server Tes.com" constructed from
The name : SSL Server Test hostname.example.com (Powered by Qualys SSL Labs).pdf
I only change the hostname and domain here, i kept the format exact the same.
Greetz,
Louis
More information about the MailScanner
mailing list