On May 12, 2008, at 4:27 PM, James G. Sack (jim) wrote:
Every once in a while I see something like this insertion at the top
of
a message
This message has been processed by Symantec's AntiVirus Technology.
quoting Gregory K. Ruiz-Ade as of Mon, May 12, 2008 at 03:05:31PM
-0700: was not scanned for viruses because of the error:
DECERR_CHILD_EXTRACT
This is supremely amusing to me, because it appears that:
a) RR is indeed doing virus-filtering for all inbound mail, whether or
not you have spam filtering enabled (generally, good, but tell your
damn users about it.)
b) RR is using an exchange-based virus scanning system.
How do I know (b) is true? Well:
1) Symantec doesn't make Linux/Unix products that I'm aware of
2) Linux/Unix products don't choke on lines matching '^begin .*$' but
instead actually verify that what looks like might be a uuencoded file
actually is.
This is an error based on the fact that Symantec is relying on
(broken) Microsoft libraries that blindly try to interpret anything
following '^begin ' (the word "begin" at the start of the line
followed by two space characters) as a uuencoded file, and fail if
they're wrong about that guess.
This is underlined by the fact that it was telling you that the file
name of the attached file, which was not scanned because it could not
be extracted, was:
"quoting Gregory K. Ruiz-Ade as of Mon, May 12, 2008 at 03:05:31PM
-0700"
Hooray broken Microsoft code (which has had open bugs filed against it
for at least 10 years.)
Enjoy,
Gregory
--
Gregory K. Ruiz-Ade <[EMAIL PROTECTED]>
OpenPGP Key ID: EAF4844B keyserver: pgpkeys.mit.edu
--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list
