Summary
Emails quarantined as malformed are those that triggered any of the following parameters in section 11 of the imss.ini file:
# 11.1
# Maximum number of entities allowed in each mail message (usually Maximum attachment or embedded item) LimitEntities=64
# 11.2
# Maximum number of parameters allowed in each header field (You can change this field to increase the To, CC, or BCC fields)
LimitHeaderParams=100
# 11.3
# Maximum number of header fields allowed in each entity
LimitHeaders=500
You can also check the log.imss.DATE.xxxx log file and find the following error message if, for example, the "LimitEntities" exceeded the limit:
2008/09/07 09:09:07 GMT+01:00 [23191:-1227470336:] Encounter malformed message, fall into exception handling. (7) 'TMMSG_ERR_C_INT_MUCH_ENTITIES_IN_MESSAGE'
To avoid malformed emails, do one the following:
For Windows:
- Back up the imss.ini file.
- Open the imss.ini file and edit the following parameters to the maximum value needed:
- LimitEntities
- LimitHeaderParams
- LimitHeaders
- Save and close the file.
- Restart the IMSS scan and policy service.
For Linux/Unix:
- Back up the imss.ini file by executing the following command:
cp /opt/trend/imss/config/imss.ini /opt/trend/imss/config/imss.ini.bak
- Edit the file by running the command below:
vi /opt/trend/imss/config/imss.ini
- Change the value of the following parameters to the maximum value needed:
- LimitEntities
- LimitHeaderParams
- LimitHeaders
- Save and close the file.
- Restart the SMTP daemon using the following command:
/opt/trend/imss/script/S99IMSS restart
