Amavis rejecting mail with bad header

[Alain Spineux]

On Jan 16, 2008 7:09 PM, Jeffrey Walls <jwalls at browntransmission.com> wrote:
> No it isn't a computer or software company at all. It appears to be a
> mainframe email program, JES2Mail.
>
> I have added them to the whitelist and it's still errors out.
>
> They were added to amavisd.conf.template in Section V
>
> map { $whitelist_sender{lc($_)}=1 } (qw(
>   nobody at cert.org
>   owner-alert at iss.net
>   slashdot at slashdot.org
>   bugtraq at securityfocus.com
>   NTBUGTRAQ at LISTSERV.NTBUGTRAQ.COM
>   security-alerts at linuxsecurity.com
>   amavis-user-admin at lists.sourceforge.net
>   notification-return at lists.sophos.com
>   mailman-announce-admin at python.org
>   owner-postfix-users at postfix.org
>   owner-postfix-announce at postfix.org
>   owner-sendmail-announce at Lists.Sendmail.ORG
>   owner-technews at postel.ACM.ORG
>   lvs-users-admin at LinuxVirtualServer.org
>   ietf-123-owner at loki.ietf.org
>   cvs-commits-list-admin at gnome.org
>   rt-users-admin at lists.fsck.com
>   clp-request at comp.nus.edu.sg
>   surveys-errors at lists.nua.ie
>   emailNews at genomeweb.com
>   owner-textbreakingnews at CNNIMAIL12.CNN.COM
>   yahoo-dev-null at yahoo-inc.com
>   returns.groups.yahoo.com
>   MGMTDATA at XXXXXXXXXXX.com
> <<<<<<<----------------------here
>   mgmtdata at XXXXXXXXXXX.com
> <<<<<<<----------------------and here
> ));

I cannot help you more with perl nor amavis, but
are you sure MGMTDATA is the "envelope" sender and not only the "From"
header value ?

>
>
> I added it in both upper and lower case, but the first one is the way the
> header appears.
>
>
>
> --
> Jeffrey Walls
> IT Manager
> Brown Transmission and Bearing Co.
> PO Box 11117
> Lancaster PA 17605-1117
> 717 295-9200 ext 214
> 717 295-9025 fax
> http://www.browntransmission.com
>
>
>
> -----Original Message-----
> From: Alain Spineux [mailto:aspineux at gmail.com]
> Sent: Wednesday, January 16, 2008 12:56 PM
> To: Jeffrey Walls
> Cc: kolab-users at kolab.org
> Subject: Re: Amavis rejecting mail with bad header
>
> On Jan 16, 2008 6:18 PM, Jeffrey Walls <jwalls at browntransmission.com> wrote:
> >
> >
> >
> > We have a multi billion dollar company that sends us automated payment
> > emails, when they pay invoices.
>
> Does it mean they are too big to be allowed to not follow the standard ?
> Big, not respecting the standard, is it M$ ?
>
> Did you try to add the sender to the whitelist in amavis.conf ?
>
> >
> > Each of their automated emails get rejected and bounced with the
> > following message:
> >
> >
> > Your message did not reach some or all of the intended recipients.
> >
> > Subject: XXXXXXXXX ACH PAYMENT
> >
> > Sent: 12/27/2007 10:01 AM
> >
> > The following recipient(s) could not be reached:
> >
> > lmccloud at xxxxxxxxxxxxxx.com on 12/27/2007 11:01 AM
> >
> > The message contains a content type that is not supported
> >
> > < servername #5.6.0 smtp; 554 5.6.0 Message with invalid header
> > rejected, id=13057-02 - Non-encoded 8-bit data (char FD hex) in
> > message header 'Date': Date: Thu, 27 Dec 2007 10:01:08 -0500
> > \375CDT\250\n>
> >
> >
> >
> > In my amavisd virusmails here are the applicable lines in the bad
> > header rejected email:
> >
> > SUBJECT:   ACH PAYMENT
> > Date: Thu, 27 Dec 2007 10:01:08 -0500 <FD>CDT<A8>
> > x-Mailer: JES2Mail Copyright LaBayne & Associates Inc.
> > Message-Id: <1198771268000801157@>
> > Content-Type: text/plain; charset=iso-8859-1
> > X-Amavis-Alert: BAD HEADER Non-encoded 8-bit data (char FD hex) in
> > message heade r 'Date': Date: Thu, 27 Dec 2007 10:01:08 -0500
> > \375CDT\250\n
> >
> > Note in the Date: line the special characters <FD> and <A8>. Is there
> > any way to strip these out, or better, ignore them?
> >
> > Also note, any normal email, sent from a person is NOT bounced, as
> > they are on a different email system.
> >
> > Thanks for any help.
> >
> > Jeff Walls
> >
> > --
> > Jeffrey Walls
> > IT Manager
> > Brown Transmission and Bearing Co.
> > PO Box 11117
> > Lancaster PA 17605-1117
> > 717 295-9200 ext 214
> > 717 295-9025 fax
> > http://www.browntransmission.com
> >
> > _______________________________________________
> > Kolab-users mailing list
> > Kolab-users at kolab.org
> > https://kolab.org/mailman/listinfo/kolab-users
> >
> >
>
>
>
> --
> Alain Spineux
> aspineux gmail com
> May the sources be with you
>
>



-- 
Alain Spineux
aspineux gmail com
May the sources be with you