Setting feat_log_inline = 0
From xxx@example.com  Thu Aug  3 07:32:10 2000
Return-Path: <xxx@example.com>
Received: from example.com (root@example.com [149.144.245.5])
	by example.com (8.9.3/8.9.3) with ESMTP id HAA01305
	for <bre@example.com>; Thu, 3 Aug 2000 07:32:03 GMT
From: xxx@example.com
Date: Thu, 3 Aug 2000 06:39:59 GMT
Message-Id: <200008030639.GAA23780@example.com>
Sender: xxx@example.com
To: fake@example.com
Subject: Clean multipart/mixed test case
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
MIME-Version: 1.0
Content-Type: application/DEFANGED-99; x-mac-creator=5068466C; x-mac-type=4A504547
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="evil_exe.DEFANGED-99"

[encoded data, 10220 characters]
///BASE64///

Total base64 encoded data:     141     141   10233
*** Exit code was 0 ***
Setting feat_log_inline = 1
From xxx@example.com  Thu Aug  3 07:32:10 2000
Return-Path: <xxx@example.com>
Received: from example.com (root@example.com [149.144.245.5])
	by example.com (8.9.3/8.9.3) with ESMTP id HAA01305
	for <bre@example.com>; Thu, 3 Aug 2000 07:32:03 GMT
From: xxx@example.com
Date: Thu, 3 Aug 2000 06:39:59 GMT
Message-Id: <200008030639.GAA23780@example.com>
Sender: xxx@example.com
To: fake@example.com
Subject: Clean multipart/mixed test case
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
MIME-Version: 1.0
Content-Type: application/DEFANGED-99; x-mac-creator=5068466C; x-mac-type=4A504547
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="evil_exe.DEFANGED-99"

[encoded data, 10220 characters]
///BASE64///

Total base64 encoded data:     282     282   20466
*** Exit code was 0 ***
Setting feat_log_inline = 2
From xxx@example.com  Thu Aug  3 07:32:10 2000
Return-Path: <xxx@example.com>
Received: from example.com (root@example.com [149.144.245.5])
	by example.com (8.9.3/8.9.3) with ESMTP id HAA01305
	for <bre@example.com>; Thu, 3 Aug 2000 07:32:03 GMT
From: xxx@example.com
Date: Thu, 3 Aug 2000 06:39:59 GMT
Message-Id: <200008030639.GAA23780@example.com>
Sender: xxx@example.com
To: fake@example.com
Subject: Clean multipart/mixed test case
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="Test_Wrapper_Boundary"
Content-Transfer-Encoding: 8bit


--Test_Wrapper_Boundary
Content-Type: application/DEFANGED-99; x-mac-creator=5068466C; x-mac-type=4A504547
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="evil_exe.DEFANGED-99"

[encoded data, 10220 characters]
///BASE64///

--Test_Wrapper_Boundary
Content-Type: text/sanitizer-log; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="sanitizer.log"

This message has been 'sanitized'.  This means that potentially
dangerous content has been rewritten or removed.  The following
log describes which actions were taken.

Sanitizer (start="0"):
  ParseHeader ():
    Using xxx@example.com as reply-to address.
    Using <xxx@example.com> as errors address.
    Got MIME info: _boundpre="--", _disposition="attachment", _encoding="base64", _type="application/applefile", boundary="", charset="iso-8859-1", filename="evil.exe", x-mac-creator="5068466C", x-mac-type="4A504547"

  Finished parsing message header.
  Forcing message to be multipart/mixed, to facilitate logging.
  Parsing body as application/applefile
  WrapWithMultipart
  Writer (pos="628"):
    Set MIME info to: _boundpre="--", _encoding="8bit", _type="multipart/mixed", _version="1.0", boundary="Test_Wrapper_Boundary"
    CleanMultipart
    ParserUnclosedMultipart
    Part (pos="652"):
      ParseHeader ():
        Got MIME info: _boundpre="--", _disposition="attachment", _encoding="base64", _type="application/applefile", boundary="", charset="iso-8859-1", filename="evil.exe", x-mac-creator="5068466C", x-mac-type="4A504547"

      Parsing body as DEFAULT.
      CleanUnknown
      SanitizeFile (filename="evil.exe", mimetype="application/applefile"):
        Rule 1: .exe$
        Match (names="evil.exe", rule="1"):
          Saved attachment as /tmp/att-evil.exe (7569 bytes, digest 28a63ac373153f5bba3586a9376569931eb3ec71d8bfa12c7963f0b63ae55f06).
          ScanFile (file="/tmp/att-evil.exe"):
            /bin/false
            Scan cmd: /bin/false
            
            File was infected, but the virus checker fixed it.

          Enforced policy: unknown

        Match (rule="default"):
          Enforced policy: defang

        Replaced mime type with: application/DEFANGED-99
        Replaced file name with: evil_exe.DEFANGED-99

      Writer (pos="7742"):
        Set MIME info to: _boundpre="--", _disposition="attachment", _encoding="base64", _id="<DEFANGED-99>", _type="application/DEFANGED-99", boundary="", charset="iso-8859-1", filename="evil_exe.DEFANGED-99", name="evil_exe.DEFANGED-99", x-mac-creator="5068466C", x-mac-type="4A504547"

      ParserCat

    Total modifications so far: 1



--Test_Wrapper_Boundary--
Total base64 encoded data:     423     423   30699
*** Exit code was 0 ***
