malware with BAD HEADER, MIME error not blocked

[Dave Dodd]

On Thu, Mar 31, 2016 at 03:09:34PM +0200, Mark Martinec wrote:
> 
> > I don'twant to just blindly block any email with a bad header, from
> > fear of blocking too many normal mails sent by a stupid client
> > program.
> 
> You may use a SpamAssassin rule like the following to
> capture such invalid wrap:
> 
> full   L_INV_NAME_WRAP /^Content-Type:.*\nname="/mi
> score  L_INV_NAME_WRAP 20

This is going to treat anything with the sort of broken header as spam.

1. Is there any way to "fix" the header so that content scanning could proceed ?

   In my case this would avoid putting legitmate mail, sent by a broken client,
   in quarantine.

2. Are there any know broken clients that create this sort of broken header
   for legitimate email ?

-- Dave