f secure Email message is found suspicious. "Too long header field"
Some mails are dropped because the header field is too long. Could you tell me what mean "the header field" and why this is blocked ?
Thanks in advance,
In most cases this has been happened because FSAV4MSE have been found that an email message violates RFC standard. By default the product Drop the whole message (Web Console > Transport Protection > Inbound Mail > Other) as an action on malformed mails and quarantine it as well.
However, you can prevent to Drop the whole message to change the setting to Pass Through.
If you can find the blocked email message in the quarantine, open the raw message and check which header and how long it is. If you see a header that exeeds 1024 characters, then it is too long according to RFC. Note that too long header field may indicate that the message is sent a badly designed software (like spammers use) or malicious.
thank you for your helpful replies
We have to have a sample of the email to make further investigation with the issue. Go to FSAV4MSE quarantine and download the email (= header field is too long) as an *.eml format and then send it to our support as a support request.
Thank you in advance,