Results 1 to 4 of 4

Thread: amavisd and zimbra antispam engine don't blocking wrong attachemnt .Please help me

Hybrid View

  1. #1
    Join Date
    Aug 2008
    Location
    Pakistan
    Posts
    100
    Rep Power
    7

    Default amavisd and zimbra antispam engine don't blocking wrong attachemnt .Please help me

    I am using zimbra 8 OS , its Antispamming engin and antivirus server dosn't detecting spam mails , as some one has send me email with attachment but inside attachment there is .exe but its icon is pdf. but why it dons't block ???


    Return-Path: message@securebank.com
    ## Zimbra antispamer and antivirus dosn't work well ###
    Received: from mail.mydomain.com (LHLO mail.mydomain.com) (10.10.10.110) by
    mail.mydomain.com with LMTP; Mon, 17 Dec 2012 20:27:41 +0500 (PKT)
    Received: from localhost (localhost [127.0.0.1])
    by mail.mydomain.com (Postfix) with ESMTP id BA3221E0F8E
    for <farrukhndm@mydomain.com>; Mon, 17 Dec 2012 20:27:41 +0500 (PKT)
    X-Quarantine-ID: <1g8CClIN_LAd>
    X-Virus-Scanned: amavisd-new at mydomain.com
    X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: unexpected end of
    header; ; error: part did not end with expected boundary; ; error:
    unexpected end of parts before epilogue
    X-Spam-Flag: NO
    X-Spam-Score: 1.623
    X-Spam-Level: *
    X-Spam-Status: No, score=1.623 tagged_above=-10 required=6.6

    tests=[BAYES_50=0.8, RDNS_NONE=0.793, T_FSL_HELO_NON_FQDN_2=0.01,
    T_HEADER_FROM_DIFFERENT_DOMAINS=0.01, T_RCVD_IN_HOSTKARMA_BL=0.01]
    autolearn=no
    Received: from mail.mydomain.com ([127.0.0.1])
    by localhost (mail.mydomain.com [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id 1g8CClIN_LAd for <farrukhndm@mydomain.com>;
    Mon, 17 Dec 2012 20:27:36 +0500 (PKT)
    Received: from securebank.com (unknown [186.115.39.104])
    by mail.mydomain.com (Postfix) with ESMTP id 1E4A31E0F87
    for <farrukhndm@mydomain.com>; Mon, 17 Dec 2012 20:27:33 +0500 (PKT)
    Received: from Fax.mydomain.com (10.0.0.154) by mydomain.com (10.0.0.188) with Microsoft SMTP Server (TLS) id F3HJKG1J; Mon, 17 Dec 2012 10:29:27 -0500
    Received: from FaxServer.mydomain.com (10.117.17.129) by SMTP.mydomain.com (10.0.0.36) with Microsoft SMTP Server id OOH9SYDI; Mon, 17 Dec 2012 10:29:27 -0500
    Date: Mon, 17 Dec 2012 10:29:27 -0500
    From: Fax Server <Incoming.Fax@mydomain.com>
    X-MS-Has-Attach: yes
    X-MS-Exchange-Organization-SCL: -1
    X-MS-TNEF-Correlator: <IRKFR69VL1GWNQID4ODQKQ1TJ4YRRUD3JFIN6D@mydomain.c om>
    X-MS-Exchange-Organization-AuthSource: E32YRO39T5H8ME2@mydomain.com
    X-MS-Exchange-Organization-AuthAs: Internal
    X-MS-Exchange-Organization-AuthMechanism: 02
    X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;7;0;0 0 0
    X-Priority: 3 (Normal)
    Message-ID: <FIYCXD2ILJGNEL9SDVSG8S65RKY255235BPAR9@mydomain.c om>
    To: <farrukhndm@mydomain.com>
    Subject: INCOMING FAX REPORT : Remote ID: 749-646-3665
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    boundary="_002_8LD78XBHZC7R3WBYQ4KBJSZDOFFHENZSZR6 RFNX8D67DYAQWMT38G0B_"

    --_002_8LD78XBHZC7R3WBYQ4KBJSZDOFFHENZSZR6RFNX8D67DY AQWMT38G0B_
    Content-Type: text/plain; charset=koi8-r
    Content-Transfer-Encoding: 8bit

    ************************************************** *******
    INCOMING FAX REPORT
    ************************************************** *******

    Date/Time: 11/09/2012 01:52:32 CST
    Speed: 41291 bps
    Connection time: 08:07
    Pages: 9
    Resolution: Normal
    Remote ID: 749-646-3665
    Line number: 749-646-3665
    DTMF/DID:
    Description: 2013 Recruitment plan

    ************************************************** *******

    --_002_8LD78XBHZC7R3WBYQ4KBJSZDOFFHENZSZR6RFNX8D67DY AQWMT38G0B_
    Content-Type: application/zip; name="IncomingFax.zip"
    Content-Transfer-Encoding: base64
    Content-Disposition: attachment; filename="IncomingFax.zip"
    =======

    ## Google Anti spammer works fine ###
    Send results from to Google account

    This is the mail system at host mail.mycomain.com.

    I'm sorry to have to inform you that your message could not
    be delivered to one or more recipients. It's attached below.

    For further assistance, please send mail to postmaster.

    If you do so, please include this problem report. You can
    delete your own text from the attached returned message.

    The mail system

    <fxxxxx@Gmail.com>: host aspmx.l.google.com[173.194.76.26] said: 552-5.7.0
    Our system detected an illegal attachment on your message. Please 552-5.7.0
    visit Some file types are blocked - Gmail Help to 552 5.7.0
    review our attachment guidelines. s1si3236456qct.56 (in reply to end of
    DATA command)

  2. #2
    Join Date
    Nov 2009
    Posts
    7
    Rep Power
    6

    Default

    Bump. I also get this header and the virus emails are allowed into inbox!

    X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: unexpected end of
    header

  3. #3
    Join Date
    Jan 2009
    Location
    Palermo
    Posts
    43
    Rep Power
    6

    Default

    To improve amavis, install compressor and decompressor. Check the forum.

  4. #4
    Join Date
    Nov 2009
    Posts
    7
    Rep Power
    6

    Default

    Quote Originally Posted by babyporch View Post
    To improve amavis, install compressor and decompressor. Check the forum.
    Thanks for your guiding. I didn't find any useful information searching this forum with 'compressor'. I already have zip, gzip, bzip2 available for zimbra, what else do I need?

Similar Threads

  1. Antispam, Amavisd & CPU
    By ekmeek in forum Administrators
    Replies: 1
    Last Post: 06-04-2012, 02:53 AM
  2. amavisd is not blocking
    By amarjith_s@hotmail.com in forum Administrators
    Replies: 3
    Last Post: 04-04-2011, 08:31 AM
  3. Attachemnt off site Web UI not available
    By RevDarkman in forum Installation
    Replies: 0
    Last Post: 06-22-2009, 04:04 AM
  4. Replies: 0
    Last Post: 01-20-2009, 12:29 AM
  5. Wrong type of Graph for AntiSpam/AntiVirus Activity
    By jstrat in forum Administrators
    Replies: 0
    Last Post: 10-24-2006, 03:45 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •