[imp] IMP: Disallowed MIME characters found in headers

Frode Tviberg frode.netcom at tviberg.com
Sat Mar 22 11:15:10 PST 2003


Hi!

I've get this when emails from IMP is 'travelling' through the
qmail-virusscanner at work. Is there something wrong in the
header of imp?

The qmail-scanner-page says this:
http://qmail-scanner.sourceforge.net/FAQ.php

Hey! what's this "Disallowed MIME characters found in headers" doing to 
<product X> messages!!!. That internal function in Qmail-Scanner blocks any 
MIME e-mail message that contains either NULL characters ("\0") or CR chars 
("\r") in the headers. Such characters are used by viruses/trojans to bypass 
antivirus scanners, and the presence of this feature automatically blocks them. 
It also has the side effect of blocking quite a bit of SPAM - as most spammers 
hand-code their SPAM generators and don't know how to read RFCs. Unfortunately, 
some "good" e-mail generators are also broken/misconfigured and trigger the 
quarantine action. Typically what has happened is that a config file for the 
generator has been edited from within Windows [Unix uses LF "\n" to delimit end 
of lines, whereas Windows uses "CRLF "\r\n"], and of course, it's thrown CR 
chars into what should have been text-only config details. Only the "owner" of 
the particular e-mail generator can fix this problem. Qmail-Scanner is doing 
it's job. 

Frode Tviberg
Norway


-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/


More information about the imp mailing list