[exim] Word-Virus - Filename not detected

Top Page
Delete this message
Reply to this message
Author: Cyborg
Date:  
To: Exim-users
Subject: [exim] Word-Virus - Filename not detected

Hi,

this is part of a virus email :


--------------439767554304687794273679
Content-Type: application/msword;
name="ARY7411 - 08.11.2017.doc"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="ARY7411 - 08.11.2017.doc"

UEsDBBQABgAIAAAAIQBw5s8ffAEAAOYFAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIo
oAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
.....

Its the only part, where a filename is given.

But "$mime_filename" stays empty, so the filename can't get detected
inside exims filter

acl_check_mime:

  # File extension filtering.

  warn log_message     = processing file "$mime_filename" for "To:
$header_to -> From: $header_from / R=$reply_address"

logs "processing file "" for "To: etc. etc.."


Even when i "correct" the mime-header lines to a single-line each, i end
up with "" as $mine_filename" .

Any Ideas how to fix this ?

exim-4.87-5.fc25.x86_64



--

send by my Thunderbird