[Esa-l] ANN: Sanitizer update

John D. Hardin jhardin at wolfenet.com
Fri Aug 4 17:54:47 PDT 2000


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The procmail sanitizer has been updated. The current version is 1.116
It is available via:

US: ftp://ftp.rubyriver.com/pub/jhardin/antispam/procmail-security.html
EU: ftp://kanon.net/pub/jhardin/antispam/procmail-security.html

- From the News section of the home page:

08/04/00
Okay, don't trigger the Excessively Long Header trap until the
header exceeds 250 characters.
Added asd to the default MANGLE_EXTENSIONS. If you are
overriding the default list you should add it to your custom list.
Fixed a problem where it was possible for the sanitizer to
overlook every other attachment in a series of document attachments.
Added clearing of the MIME content type if the attachment
filename gets mangled, to prevent the mail program from figuring
out what program to run even though the filename is mangled.
For the same reason, drop x-mac-* clauses that Eudora uses to
indicate the file type and restore the filename extension.

Also, the sanitizer, home page, gateway nano-HOWTO and a list of poisoned
filespecs is now available as a tarball.


-----BEGIN PGP SIGNATURE-----
Version: PGP 5.0
Charset: noconv

iQA/AwUBOYtXctgi5ua4cy55EQJYFgCgreoXmfTnVaikQeocLXtG+ZAlLa0AmwbB
WxHBqzs+fhimsjTIJSNQK9BY
=+wl+
-----END PGP SIGNATURE-----

--
 John Hardin KA7OHZ   ICQ#15735746   http://www.wolfenet.com/~jhardin/
 jhardin at wolfenet.com      pgpk -a finger://gonzo.wolfenet.com/jhardin
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
  does quite what I want. I wish Christopher Robin was here."
				-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
   86 days until Daylight Savings Time ends





More information about the esd-l mailing list