From bre Fri Jan 30 03:37:34 1998
Date: Wed, 13 Dec 2000 17:13:26 +0800
From: Admin <foo@bar.com>
Subject: Yet another MIME test
To: Admin <baz@bar.com>
Con(FOO)tent-Type: MULT(comment)I(c2)PA(c3)RT/ALTERNATIVE; boundary=Boundary_(THIS_DOESNT_GET_DROPPED)
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
MIME-Version: 1.0
Content-Type: MULTIPART/ALTERNATIVE; boundary="MIMEStream=_+testing99"
Content-Transfer-Encoding: 8bit


--MIMEStream=_+testing99
Content-Type: application/DEFANGED-101; format=flowed; charset="us-ascii"
Content-Disposition: attachment; name="evil file_exe.DEFANGED-101"

Part one
--MIMEStream=_+testing99
Content-type: text/plain; charset=us-ascii

Part two

-- 
This message has been 'sanitized'.  This means that potentially
dangerous content has been rewritten or removed.  The following
log describes which actions were taken.

Sanitizer (start="0"):
  ParseHeader ():
    Detected obfuscated content-type header: con(foo)tent-type

  Replaced MIME boundary: >>Boundary_<<
                    with: >>MIMEStream=_+testing99<<
  Fixed invalid/unusable part encoding.
  Part (pos="357"):
    SanitizeFile (filename="evil file.exe", mimetype="text/plain"):
      Match (rule="default"):
        Enforced policy: defang

      Replaced mime type with: application/DEFANGED-101
      Replaced file name with: evil file_exe.DEFANGED-101

  Part (pos="521"):
    SanitizeFile (filename="unnamed.txt", mimetype="text/plain"):
      Match (names="unnamed.txt", rule="2"):
        Enforced policy: accept

    Total modifications so far: 3



--MIMEStream=_+testing99--
*** Exit code was 0 ***
From bre Fri Jan 30 03:37:34 1998
Date: Wed, 13 Dec 2000 17:13:26 +0800
From: Admin <foo@bar.com>
Subject: Yet another MIME test
To: Admin <baz@bar.com>
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
MIME-Version: 1.0
Content-Type: MULTIPART/ALTERNATIVE; boundary="MIMEStream=_+testing99"
Content-Transfer-Encoding: 8bit


--MIMEStream=_+testing99
Content-Type: application/DEFANGED-100; format=flowed; charset="us-ascii"
Content-Disposition: attachment; name="evil file_exe.DEFANGED-100"

Part one
--MIMEStream=_+testing99
Content-type: text/plain; charset=us-ascii

Part two

-- 
This message has been 'sanitized'.  This means that potentially
dangerous content has been rewritten or removed.  The following
log describes which actions were taken.

Sanitizer (start="0"):
  Replaced MIME boundary: >>Boundary<<
                    with: >>MIMEStream=_+testing99<<
  Part (pos="289"):
    SanitizeFile (filename="evil file.exe", mimetype="text/plain"):
      Match (rule="default"):
        Enforced policy: defang

      Replaced mime type with: application/DEFANGED-100
      Replaced file name with: evil file_exe.DEFANGED-100

  Part (pos="420"):
    SanitizeFile (filename="unnamed.txt", mimetype="text/plain"):
      Match (names="unnamed.txt", rule="2"):
        Enforced policy: accept

    Total modifications so far: 2



--MIMEStream=_+testing99--
*** Exit code was 0 ***
From bre Fri Jan 30 03:37:34 1998
Date: Wed, 13 Dec 2000 17:13:26 +0800
From: Admin <foo@bar.com>
Subject: Yet another MIME test
To: Admin <baz@bar.com>
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
MIME-Version: 1.0
Content-Type: MULTIPART/ALTERNATIVE; boundary=Boundary
Content-Transfer-Encoding: 8bit

--------------------------------------------
This is crap
--------------------------------------------

--NotABoundary

--ReallyAFakeBoundary

--Boundary
Content-Type: application/DEFANGED-100; format=flowed; charset="us-ascii"
Content-Disposition: attachment; name="evil_exe.DEFANGED-100"

Part one
--Boundary
Content-type: text/plain; charset=us-ascii

Part two

-- 
This message has been 'sanitized'.  This means that potentially
dangerous content has been rewritten or removed.  The following
log describes which actions were taken.

Sanitizer (start="0"):
  MIME boundary missing, guessed: >>Boundary<<
  Part (pos="395"):
    SanitizeFile (filename="evil.exe", mimetype="text/plain"):
      Match (rule="default"):
        Enforced policy: defang

      Replaced mime type with: application/DEFANGED-100
      Replaced file name with: evil_exe.DEFANGED-100

  Part (pos="523"):
    SanitizeFile (filename="unnamed.txt", mimetype="text/plain"):
      Match (names="unnamed.txt", rule="2"):
        Enforced policy: accept

    Total modifications so far: 2



--Boundary--
*** Exit code was 0 ***
