Uneven size in DecodeToStream? What causes this error?
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1924
Printed Date: 11 May 2025 at 4:06am
Topic: Uneven size in DecodeToStream? What causes this error?
Posted By: Guests
Subject: Uneven size in DecodeToStream? What causes this error?
Date Posted: 09 September 2003 at 1:36pm
|
These spams are not able to be scanned and get passed though. What the the cause for this error? The emails are only 4kb in size so I don't see that as an issue. 09/09/03 10:28:13:125 -- (201) Connection from: 199.181.164.63 - Originating country : United States |
Replies:
Posted By: Guests
Date Posted: 09 September 2003 at 7:55pm
|
Roberto, Noticed that this DecodeToStream issue has been raised before on this forum, and you have asked for message samples where this error occurred... if it will help, I've got a sample message where this error occurred on our system. I've saved the message as a text file on the server, so the full headers and unmodified message content is still there. I'll attach this text file to an email message and send it your way. Lots of interesting things about this message... a corrupted Message-ID field (intentionally corrupted, you can be sure), a pipe character in the subject line, and the old base64 with content-type=text/html trick. Easy to see how the keyword filter might find something in this message that it can't digest. I will also attach the section of the SpamFilter log showing where the DecodeToStream error occurred. As you can see, SpamFilter did stop the message based on blacklist, but the keyword search didn't happen. One other note... I am using the INI file setting FilterBase64html=1 on my server. Not certain whether this is relevant to your research, but since this is one of the characteristics of this message, I figured that you should know. Jim |
Posted By: LogSat
Date Posted: 10 September 2003 at 11:12pm
|
Jim, Thank you very much for the source of the email you provided. The problem was caused by invalid/corrupt encoding of the email body (the subject was fine), which caused our decoder to skip it since it would be unreliable. We've patched the decoder so that it now converts all the valid data it finds, without erroring out. We'll include the fix in the next build that will be released within a few days. Roberto F. |
Posted By: LogSat
Date Posted: 10 September 2003 at 11:18pm
|
Thanks to JimMeredith we received a copy of a full email message that caused the error. The problem was caused by invalid/corrupt encoding of the email, which caused our decoder to skip it since it would be unreliable.
We've patched the decoder so that it now converts all the valid data it finds, without erroring out. We'll include the fix in the next build that will be released within a few days. Roberto F. |
Posted By: Robby
Date Posted: 16 January 2007 at 3:37am
|
Hello everybody, I am programming in Delphi. Retrieving the emails one by one in the server, this error occurs: Uneven size in DecodeToStream. I feel that there is something wrong with the email. But I did not know what. It is almost impossible that it lies on my Delphi code. Now I have an idea what the causes could be. Thank you so much to all of you for these information. Kind regards, Robby Tosasi,  a Surinamese living in the Netherlands. |
Posted By: LogSat
Date Posted: 16 January 2007 at 5:05pm
|
If one of the attachments is not encoded correctly, your Indy library may cause the whole message to fail.
------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |