[IntelMQ-users] [IHAP] Intelmq SMTP bots not sending CSV in mail:: Need Help

[Kossi DOH]

Tanks all for your help. I am still on it. Hope to get it work soon.

Cordialement / Best Regards,
Kossi DOH
Analyste Cyber Securite
CYBER DEFENSE AFRICA S.A.S.
Mobile: +228 70 54 93 26
www.cda.tg<http://www.cda.tg>
This information is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Unauthorised use of this information by a person or entity other than the intended recipient is prohibited by law. If you received this by mistake, please immediately contact the sender by email or phone and delete this information from any computer. Thank you.

From: IntelMQ-users <intelmq-users-bounces at lists.cert.at> On Behalf Of Sebastian Wagner
Sent: Monday, June 7, 2021 8:52 AM
To: intelmq-users at lists.cert.at
Subject: Re: [IntelMQ-users] [IHAP] Intelmq SMTP bots not sending CSV in mail:: Need Help


Hi,
On 6/7/21 10:04 AM, Ángel González Berdasco wrote:
El lun, 07-06-2021 a las 09:49 +0200, Sebastian Wagner escribió:

Hi,

The SMTP output bot uses these headers for the CSV attachment:

Content-Type: text/csv; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

Maybe Outlook needs something else?

Sebastian

I think the issue is the lack of name, so it would need a header like

Content-Disposition: attachment; filename="somefeed.csv"

Best regards


¹ https://datatracker.ietf.org/doc/html/rfc6266

Thanks for the hint. It looks like this header needs to be "manually" added:

https://docs.python.org/3/library/email.compat32-message.html#email.message.Message.add_header
here:
https://github.com/certtools/intelmq/blob/a51276054a7c5f0744ccb90cda54a03eeed75400/intelmq/bots/outputs/smtp/output.py#L69

Sebastian

--

// Sebastian Wagner <wagner at cert.at><mailto:wagner at cert.at> - T: +43 676 898 298 7201

// CERT Austria - https://www.cert.at/

// Eine Initiative der nic.at GmbH - https://www.nic.at/

// Firmenbuchnummer 172568b, LG Salzburg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cert.at/pipermail/intelmq-users/attachments/20210607/b72884cb/attachment.htm>