/usr/share/sanitizer/testcases/results.def/sanitizer.tnef.ok is in sanitizer 1.76-3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 | From bre Fri May 17 19:33:45 2002
Return-Path: <bre@monique.frisk-software.com>
Received: (from bre@localhost)
by monique.frisk-software.com (8.11.2/8.11.2) id g4HJXjK19121
for bre@monique.frisk-software.com; Fri, 17 May 2002 19:33:45 GMT
Date: Fri, 17 May 2002 19:33:45 +0000
From: =?iso-8859-1?Q?Bjarni_R=FAnar_Einarsson?= <bre@monique.frisk-software.com>
To: =?iso-8859-1?Q?Bjarni_R=FAnar_Einarsson?= <bre@monique.frisk-software.com>
Subject: Foo!!!
Message-ID: <20020517193345.A14401@monique.frisk-software.com>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="oyUTqETQ0mS9luUI"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Status: RO
X-FUBAR-Content-Length: 7496
X-FUBAR-Lines: 113
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
--oyUTqETQ0mS9luUI
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
ldkj
--oyUTqETQ0mS9luUI
X-Content-Type: application/ms-tnef
X-Content-Disposition: attachment; filename="winmail.dat"
X-Content-Transfer-Encoding: base64
Content-Type: multipart/mixed; boundary="TNEFStream-TESTING-1"
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
--TNEFStream-TESTING-1
X-TNEF-TnefVersion: AAABAA==
X-TNEF-OemCodepage: 5AQAAAAAAAA=
X-TNEF-MessageClass: SVBNLk1pY3Jvc29mdCBNYWlsLk5vdGUA
X-TNEF-Priority: AgA=
X-TNEF-DateRecd: Thu May 25 05:15:00 2002
X-TNEF-MAPIProps: [body 5]
Content-Type: application/DEFANGED-100
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="MAPIProps_dat.DEFANGED-100"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--TNEFStream-TESTING-1
X-TNEF-AttachRenddata: AQD/////IAAgAAAAAAA=
X-TNEF-AttachModifyDate: Thu May 25 05:15:06 2002
X-TNEF-AttachMetaFile: AQAJAAADygYAAAAAIQYAAAAABQAAAAEC////AAUAAAAJAgAAAAAEAAAABwEBAGUA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X-TNEF-AttachData: [body 9]
X-TNEF-AttachFileName: aW1hZ2UwMDEuanBnAA==
X-TNEF-Attachment: EwAAAAMAIA5U9gAAHgABMAEAAAANAAAAaW1hZ2UwMDEuanBnAAAAAAIBAjcBAAAA
AAAAAB4AAzcBAAAABQAAAC5qcGcAAAAAAwAFNwEAAAAeAAc3AQAAAA0AAABpbWFn
ZTAwMS5qcGcAAAAAAwALN/////8eAA43AQAAAAsAAABpbWFnZS9qcGVnAAAeABI3
AQAAAB8AAABpbWFnZTAwMS5qcGdAMDFDMUVDMTguMjgwODdFMjAAAAMA+n8AAAAA
QAD7fwBA3aNXRbMMQAD8fwBA3aNXRbMMAwD9fwAAAAALAP5/AQAAAAMAIQ5FIAIA
AgH4DwEAAAAQAAAAaJO39HoOeEu0UJFrYO6mUgIB+g8BAAAAEAAAAGiTt/R6DnhL
tFCRa2DuplICAfsPAQAAAHMAAAAAAAAAOKG7EAXlEBqhuwgAKypWwgAAUFNUUFJY
LkRMTAAAAAAAAAAATklUQfm/uAEAqgA32W4AAABDOlxXSU5ET1dTXEFwcGxpY2F0
aW9uIERhdGFcTWljcm9zb2Z0XE91dGxvb2tcb3V0bG9vay5wc3QAAAMA/g8HAAAA
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
****
NOTE: An attachment was deleted from this part of the message,
because it failed one or more checks by the virus scanning system.
See the attached sanitization log for more details or contact your
system administrator.
The removed attachment's name was:
image001.jpg (evaluated as image001.jpg)
It might be a good idea to contact the sender and warn them that
their system is infected.
****
--TNEFStream-TESTING-1--
--oyUTqETQ0mS9luUI
Content-Type: text/sanitizer-log; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="sanitizer.log"
This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start="0"):
Part (pos="712"):
SanitizeFile (filename="unnamed.txt", mimetype="text/plain"):
Match (names="unnamed.txt", rule="2"):
ScanFile (file="./.tmp.ABC"):
Scan succeeded, file is clean.
Enforced policy: unknown
Match (names="unnamed.txt", rule="9"):
Enforced policy: accept
Part (pos="809"):
Converted Microsoft TNEF encoded data to MIME.
Part (pos="125"):
Part (pos="23"):
SanitizeFile (filename="MAPIProps.dat", mimetype="application/octet-stream"):
Match (names="MAPIProps.dat", rule="2"):
ScanFile (file="./.tmp.DEF"):
Scan succeeded, file is clean.
Enforced policy: unknown
Match (rule="default"):
Enforced policy: defang
Replaced mime type with: application/DEFANGED-100
Replaced file name with: MAPIProps_dat.DEFANGED-100
Part (pos="1925"):
SanitizeFile (filename="image001.jpg", mimetype="application/octet-stream"):
Match (names="image001.jpg", rule="2"):
ScanFile (file="./.tmp.GHI"):
File was infected, the virus checker couldn't fix it.
Enforced policy: drop
Replaced mime type with: text/plain
Replaced file name with: DEFANGED-101.txt
Total modifications so far: 3
--oyUTqETQ0mS9luUI--
|