Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Preventing malformed emails on InterScan Messaging Security Suite (IMSS)

    • Updated:
    • 6 Jan 2016
    • Product/Version:
    • InterScan Messaging Security Suite 7.1 Linux
    • InterScan Messaging Security Suite 7.1 Windows
    • InterScan Messaging Security Suite 7.5 Windows
    • Platform:
    • Linux - Red Hat RHEL 4 32-bit
    • Linux - Red Hat RHEL 5 32-bit
    • Linux - Red Hat RHEL 6 32-bit
    • Linux - SuSE 10
    • Linux - SuSE 9.0
    • Windows 2000 Advanced Server
    • Windows 2000 Server
    • Windows 2003 Enterprise
    • Windows 2003 Server R2
    • Windows 2003 Standard
    • Windows 2008 Enterprise
    • Windows 2008 Server R2
    • Windows 2008 Standard
    • Windows 2012 Server Essentials
Summary

Emails quarantined as malformed are those that triggered any of the following parameters in section 11 of the imss.ini file:

# 11.1
# Maximum number of entities allowed in each mail message (usually Maximum attachment or embedded item) LimitEntities=64
# 11.2
# Maximum number of parameters allowed in each header field (You can change this field to increase the To, CC, or BCC fields)
LimitHeaderParams=100
# 11.3
# Maximum number of header fields allowed in each entity
LimitHeaders=500

You can also check the log.imss.DATE.xxxx log file and find the following error message if, for example, the "LimitEntities" exceeded the limit:

2008/09/07 09:09:07 GMT+01:00 [23191:-1227470336:] Encounter malformed message, fall into exception handling. (7) 'TMMSG_ERR_C_INT_MUCH_ENTITIES_IN_MESSAGE'

Details
Public

To avoid malformed emails, do one the following:

For Windows:

  1. Back up the imss.ini file.
  2. Open the imss.ini file and edit the following parameters to the maximum value needed:
    • LimitEntities
    • LimitHeaderParams
    • LimitHeaders
  3. Save and close the file.
  4. Restart the IMSS scan and policy service.

For Linux/Unix:

  1. Back up the imss.ini file by executing the following command:

    cp /opt/trend/imss/config/imss.ini /opt/trend/imss/config/imss.ini.bak

  2. Edit the file by running the command below:

    vi /opt/trend/imss/config/imss.ini

  3. Change the value of the following parameters to the maximum value needed:
    • LimitEntities
    • LimitHeaderParams
    • LimitHeaders
  4. Save and close the file.
  5. Restart the SMTP daemon using the following command:

    /opt/trend/imss/script/S99IMSS restart

Premium
Internal
Rating:
Category:
Configure; Troubleshoot
Solution Id:
1037737
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.