[Esd-l] Hmmm...Very interesting

[John D. Hardin]

On Wed, 20 Nov 2002, Eric Brosius wrote:

> It was a .mp3 file, so I added *.mp3 to the poisoned-files list
> and tested sending a .mp3 file and it wasn't stopped.  So I added
> it in as a managed attachment.  Why didn't it get stopped??

Attachments are not subject to poisoning or stripping if they do not
appear in the mangle list. This is the way the current sanitizer is
designed.

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...the Fates notice those who buy chainsaws...
                                              -- www.darwinawards.com
-----------------------------------------------------------------------
   27 days until The Two Towers