Q-S 1.22 just intercepted a mail with the boundary

---------MDLINK-NGMime-31071-1085586992.685255-------

written with a User-Agent named SKYRiXgreen

The debug log is attached. If you need the original mail, I will provide
it. 

After changing the Boundary to something like 

---------MDLINK-NGMime-31071-1085586992.685255-XXXXX

Q-S did not intercept the mail. So I guess there's still a bug in the
boundary handling code around those lines

if ($BOUNDARY_REGEX ne "" && /^\-\-($BOUNDARY_REGEX)/) {
  $still_attachment=$_;
  chomp($still_attachment);
  if (/^\-\-(.*)\-\-.$/) { #### <---- This seems buggy!!!!!!!
    &debug("w_c: found end of attachment boundary, BOUNDARY_REGEX was 
\"$BOUNDARY_REGEX\"...");
    my ($delete_bb)=$1;
    $delete_bb =~ s/(\W)/\\$1/g;
    $BOUNDARY_REGEX =~ s/\Q$delete_bb\E//;
    $BOUNDARY_REGEX =~ s/\|\|//;
    $BOUNDARY_REGEX =~ s/(^\||\|$)//;
    &debug("w_c: now that \"$delete_bb\" has been removed, it's 
\"$BOUNDARY_REGEX\"...");
  }
  $attachment_counter++;
  #&debug("w_c: found :$BOUNDARY_REGEX: - must be attachment section 
$attachment_counter");
}

I have not yet found a solution but to disable mime checks.

Alex

-- 
Alex Pleiner
zeitform Internet Dienste         Fraunhoferstrasse 5
                                  64283 Darmstadt, Germany
http://www.zeitform.de            Tel.: +49 (0)6151 155-635
mailto:[EMAIL PROTECTED]        Fax:  +49 (0)6151 155-634
GnuPG/PGP Key-ID: 0x613C21EA
1083: w_c: primary Content-Type of multipart/mixed found
1083: w_c: found a top-level boundary definition of 
\-\-\-\-\-\-\-MDLINK\-NGMime\-31071\-1085586992\.685255\-\-\-\-\-\-\-
1083: w_c: found end of attachment boundary, BOUNDARY_REGEX was 
"\-\-\-\-\-\-\-MDLINK\-NGMime\-31071\-1085586992\.685255\-\-\-\-\-\-\-"...
1083: w_c: now that "\-\-\-\-\-\-\-MDLINK\-NGMime\-31071\-1085586992\.685255\-\-\-\-" 
has been removed, it's "\-\-\-"...
1083: w_c: found :\-\-\-: - must be attachment section 1
1083: w_c: attachment  1: Content-Type of text/plain found
1083: w_c: found end of attachment boundary, BOUNDARY_REGEX was "\-\-\-"...
1083: w_c: now that "\-\-\-Urspr\=FCngliche\ Nachricht\-\-" has been removed, it's 
"\-\-\-"...
1083: w_c: found :\-\-\-: - must be attachment section 2
1083: w_c: found end of attachment boundary, BOUNDARY_REGEX was "\-\-\-"...
1083: w_c: now that 
"\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-"
 has been removed, it's "\-\-\-"...
1083: w_c: found :\-\-\-: - must be attachment section 3
1083: w_c: broken attachment MIME details 
(still_attachment=--------------------------------------------------, but 
BOUNDARY_REGEX="\-\-\-")- block it!
1083: w_c: found end of attachment boundary, BOUNDARY_REGEX was "\-\-\-"...
1083: w_c: now that 
"\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-\-"
 has been removed, it's "\-\-\-"...
1083: w_c: found :\-\-\-: - must be attachment section 4
1083: w_c: found end of attachment boundary, BOUNDARY_REGEX was "\-\-\-"...
1083: w_c: now that "\-\-\-\-\-\-\-MDLINK\-NGMime\-31071\-1085586992\.685255\-\-\-\-" 
has been removed, it's "\-\-\-"...
1083: w_c: found :\-\-\-: - must be attachment section 5
1083: found C-D attachment filename cast2004_infoblatt.doc
1083: w_c: attachment  5: Content-Type of application/msword found
1083: w_c: found end of attachment boundary, BOUNDARY_REGEX was "\-\-\-"...
1083: w_c: now that "\-\-\-\-\-\-\-MDLINK\-NGMime\-31071\-1085586992\.685255\-\-\-\-" 
has been removed, it's "\-\-\-"...
1083: w_c: found :\-\-\-: - must be attachment section 6
1083: found C-D attachment filename cast_forum_2004_embedded_security.ppt
1083: w_c: attachment  6: Content-Type of application/vnd.ms-powerpoint found
1083: w_c: found end of attachment boundary, BOUNDARY_REGEX was "\-\-\-"...
1083: w_c: now that 
"\-\-\-\-\-\-\-MDLINK\-NGMime\-31071\-1085586992\.685255\-\-\-\-\-\-" has been 
removed, it's "\-\-\-"...
1083: w_c: found :\-\-\-: - must be attachment section 7

Reply via email to