Author: Marc Sherman Date: To: exim-users Subject: Re: [exim] Malware bounce filtering
Michael Haardt wrote: >
> While we are at it: I do get a bunch of mails that look like Sober,
> but their attachment is truncated to only a few bytes. Thanks goodness
> the attachment names are easy to match, but what the heck is that stuff?
> A bug in Sober or the result of anti virus software "cleaning" the mail?
That's probably machines that are accepting sober messages, then either
spam-scanning them and bouncing them*, with the bounce message trimmed
to the first X bytes of the raw message body. At least they got that
last part right.
* Or possibly forwarding to a site that span-scans and rejects at SMTP time.
