Dear pg,

Mail::Internet seems to be the culprit, the message has a rouge header
field "-:" which crashes MailScanner.

Working on a patch.

cheers,
G.


I'm courious about how can such messages get into the queue? I dont know what the protocol says about it, but i think the MTA should do something with the headers of this kind before inject the message into te queue, shouldn't?

I tested with qmail by telnet to port 25, and tried to send a message with the ":- " header in many ways, but the qmail has removed it and delivered the message properly. After all, in the other day my Mailscanner chrashed, and I found message with the evil header in the queue sent by a spammer. I can't imagine how is this possible?

qmail's queue handler can remove non-RFC822 headers. when mailscanner is used, it uses Mail::Internet to parse the queue file, scan the mail and the attachments and compiles a new mail with the scanned MIME attachments and the original body, header + mailscanner's own headers.


According to qmail's documentation, the queue file should be in RFC822 format. So, Mail::Internet cannot successfully parse this invalid queue file and so MailScanner fails for this queue file, unable to parse it successfully.

cheers,
Karthikeyan, S.
--
S.Karthikeyan | Ph: +91 (0) 44 52166646 Fax: +91 (0) 44 52079957
Opencomputing Technologies | http://opencompt.com
Server Side E-Mail Protection.


------------------------------------------------------- This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
_______________________________________________
Opencomputing-openprotect mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/opencomputing-openprotect

Reply via email to