We are a leading ISP in India & we are running qmail & qmail-scanner on
our various email servers.
Since last few days, we have observed that some of the emails are
getting quarantined by qmail-scanner.
These are legal emails sent by bank to our customer, to whom we provide
internet services. He is using email-id
provided by us. Bank is sending him various emails based on financial
transactions done by him. Since these emails
are getting quarantined, its not getting delivered to our customer. He
raised a complain for the same. Emails seems auto-generated
by bank's email sever & seems to be a false positive to me. This is
happening to multiple customers of ours. Pl. help me resolve this issue.
I have attached few sample mails here with.
--
Regards,
*Regards,*
*Dharmesh Mevawala*
Manager-Networks
YOU Broadband India Pvt. Ltd.
2nd Floor, Millennium Arcade
Adajan-Hazira Road, Surat-395009
Mobile: +91 98790 00854
Landline: +91 261 6676767 Ext: 1650
Email: [email protected]
http://www.youbroadband.in
--- Begin Message ---
Attention: [email protected]
A policy-violation was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.
The policy-violation was reported to be:
Disallowed breakage found in header name - not valid email
Please contact your IT support personnel with any queries regarding this
policy.
Your message was sent with the following envelope:
MAIL FROM: [email protected]
RCPT TO: [email protected]
... and with the following headers:
---
MAILFROM: [email protected]
RCPTTO: [email protected]
IP-Addr: 115.112.212.211
Received: from alerts8.kotak.com ([115.112.212.211])
(envelope-sender <[email protected]>)
by mx1.youbroadband.in (qmail-ldap-1.03) with SMTP
for <[email protected]>; 19 Nov 2015 07:41:59 -0000
Message-ID: <63833038.1447918944174.JavaMail.wasadm@alertapp>
Date: Thu, 19 Nov 2015 13:12:24 +0530 (GMT+05:30)
From: [email protected]
To: [email protected]
Subject: Inward Cheque Debit Alert
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_162766_54788932.1447918944171"
Inward Cheque Debit Alert
: UTF8
---
The original message is kept in:
mx1.youbroadband.in:/var/spool/qscan/quarantine/policy/new/mx1.youbroadband.in144791891958824895
where the System Anti-Virus Administrator can further diagnose it.
The Email scanner reported the following when it scanned that message:
---
---perlscanner results ---
problem 'Disallowed breakage found in header name - not valid email' found in
message
---
--- End Message ---
--- Begin Message ---
Attention: [email protected]
A policy-violation was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.
The policy-violation was reported to be:
Disallowed breakage found in header name - not valid email
Please contact your IT support personnel with any queries regarding this
policy.
Your message was sent with the following envelope:
MAIL FROM: [email protected]
RCPT TO: [email protected]
... and with the following headers:
---
MAILFROM: [email protected]
RCPTTO: [email protected]
IP-Addr: 115.112.212.210
Received: from alerts7.kotak.com ([115.112.212.210])
(envelope-sender <[email protected]>)
by mx1.youbroadband.in (qmail-ldap-1.03) with SMTP
for <[email protected]>; 19 Nov 2015 07:11:57 -0000
Message-ID: <447027877.1447917142393.JavaMail.wasadm@alertapp>
Date: Thu, 19 Nov 2015 12:42:22 +0530 (GMT+05:30)
From: [email protected]
To: [email protected]
Subject: Large Credit alert
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_155784_1781099049.1447917142373"
Large Credit alert
: UTF8
---
The original message is kept in:
mx1.youbroadband.in:/var/spool/qscan/quarantine/policy/new/mx1.youbroadband.in144791711758816224
where the System Anti-Virus Administrator can further diagnose it.
The Email scanner reported the following when it scanned that message:
---
---perlscanner results ---
problem 'Disallowed breakage found in header name - not valid email' found in
message
---
--- End Message ---
--- Begin Message ---
Attention: [email protected]
A policy-violation was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.
The policy-violation was reported to be:
Disallowed breakage found in header name - not valid email
Please contact your IT support personnel with any queries regarding this
policy.
Your message was sent with the following envelope:
MAIL FROM: [email protected]
RCPT TO: [email protected]
... and with the following headers:
---
MAILFROM: [email protected]
RCPTTO: [email protected]
IP-Addr: 115.112.212.204
Received: from alerts1.kotak.com ([115.112.212.204])
(envelope-sender <[email protected]>)
by mx1.youbroadband.in (qmail-ldap-1.03) with SMTP
for <[email protected]>; 19 Nov 2015 02:40:00 -0000
Message-ID: <399775700.1447900825516.JavaMail.wasadm@alertapp>
Date: Thu, 19 Nov 2015 08:10:25 +0530 (GMT+05:30)
From: [email protected]
To: [email protected]
Subject: Account Balance - Daily
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_25103_1613193255.1447900825512"
Account Balance - Daily
: UTF8
---
The original message is kept in:
mx1.youbroadband.in:/var/spool/qscan/quarantine/policy/new/mx1.youbroadband.in14479008005882762
where the System Anti-Virus Administrator can further diagnose it.
The Email scanner reported the following when it scanned that message:
---
---perlscanner results ---
problem 'Disallowed breakage found in header name - not valid email' found in
message
---
--- End Message ---
--- Begin Message ---
Attention: [email protected]
A policy-violation was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.
The policy-violation was reported to be:
Disallowed breakage found in header name - not valid email
Please contact your IT support personnel with any queries regarding this
policy.
Your message was sent with the following envelope:
MAIL FROM: [email protected]
RCPT TO: [email protected]
... and with the following headers:
---
MAILFROM: [email protected]
RCPTTO: [email protected]
IP-Addr: 115.112.212.207
Received: from alerts4.kotak.com ([115.112.212.207])
(envelope-sender <[email protected]>)
by mx1.youbroadband.in (qmail-ldap-1.03) with SMTP
for <[email protected]>; 19 Nov 2015 08:25:54 -0000
Message-ID: <357766483.1447921580218.JavaMail.wasadm@alertapp>
Date: Thu, 19 Nov 2015 13:56:20 +0530 (GMT+05:30)
From: [email protected]
To: [email protected]
Subject: Issued Cheque Return
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_174618_243928714.1447921580215"
Issued Cheque Return
: UTF8
---
The original message is kept in:
mx1.youbroadband.in:/var/spool/qscan/quarantine/policy/new/mx1.youbroadband.in14479215555884459
where the System Anti-Virus Administrator can further diagnose it.
The Email scanner reported the following when it scanned that message:
---
---perlscanner results ---
problem 'Disallowed breakage found in header name - not valid email' found in
message
---
--- End Message ---
------------------------------------------------------------------------------
_______________________________________________
Qmail-scanner-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general