[Esd-l] Got a message that the cat dragged in, now what ?

Tommy Lindqvist lindqt at space.se
Fri Sep 19 02:26:54 PDT 2003


Hi,

The cata just managed to drag in a message past the 1.138 version of the
mail-filter. Having scanned the code for 1.139, I cannot see any reason
that 1.139 would have blocked it.

I can gzip a copy of the message after editing out a suitable portion of
the virii ( swen ) in it, but I do not know where to send it. I do not
even know if anyone besides me is interested in figuring out how the
virii managed to get past the scanner.

My first laymans guess would be that:

Content-Type: application/x-msdownload; name="Q179632.exe"
Content-Disposition: attachment
Content-Transfer-Encoding: base64

Is not recognized as a file.

Any clues now what to do next ?

Best regards,

Tommy Lindqvist



More information about the esd-l mailing list