[Esd-l]

John D. Hardin jhardin at impsec.org
Tue Feb 24 12:59:29 PST 2004


On Tue, 24 Feb 2004, Simon Matthews wrote:

> On Tue, 24 Feb 2004, John D. Hardin wrote:
> 
> > Marcela Doniov sez:
> > >
> > > procmail: Score:       0       0 "^TV[nopqr]....[AB]..A.A....*AAAA...*AAAA"
> > 
> > It is very possible that the Windows Magic test is generating a false
> > positive. The single test that is matching looks pretty short to me...
> 
> On my externally-facing MTA (postfix), incoming email is scanned for the 
> following pattern and rejected with a 550 code if it matches. 
> 
> /^TVqQAAMAAAAEAAAA\/\/8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAA/ 

That's not the rule that matched, though...


--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
  does quite what I want. I wish Christopher Robin was here."
				-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
   39 days until the Slovakian Presidential Election


More information about the esd-l mailing list