[Esa-l] Re: [Esd-l] Procmail Sanitizer local rule for SoBig .ZIP worm

John D. Hardin jhardin at impsec.org
Thu Jun 26 09:58:35 PDT 2003


On Thu, 26 Jun 2003, Sergey Latkin wrote:

> It worked, though, after I changed \.zip"? into \.zip?"?

Huh. It worked on my test messages here - but I do note that the
original message appears to be missing the close quote.

Does anybosy have a RAW, UNSANITIZED sobig message they could zip up
(including all headers) and send to me?

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.
                                            -- James Madison, 1799
-----------------------------------------------------------------------
   495 days until the Presidential Election



More information about the esd-l mailing list