In case Scott does not answer right away, can you post a log snippet? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com
> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED]] On Behalf Of Steve Flook > Sent: Thursday, January 23, 2003 6:46 AM > To: Declude mailing list (E-mail) > Subject: [Declude.Virus] Conflicting Encoding Vulnerability > > Scott / list, > > I'm wondering if I can somehow disable this test, or possibly weaken it etc > as I'm getting a couple of false positives from a particular client that is > sending emails to herself from her AOL address. A declude -diag shows I'm > running v1.65. > > The headers are below. I can send more info regarding that email if useful. > > Thanks, > Steve > > Received: from imo-d03.mx.aol.com [205.188.157.35] by webster.270net.com > with ESMTP > (SMTPD32-7.13) id ADA68AA016A; Thu, 23 Jan 2003 09:35:18 -0500 > Received: from [EMAIL PROTECTED] > by imo-d03.mx.aol.com (mail_out_v34.13.) id 3.139.19f1c555 (18707) > for <[EMAIL PROTECTED]>; Thu, 23 Jan 2003 09:37:26 -0500 (EST) > From: [EMAIL PROTECTED] > Message-ID: <[EMAIL PROTECTED]> > Date: Thu, 23 Jan 2003 09:37:26 EST > Subject: Fwd: gmt Super Bowl Report 01/21/2003 > To: [EMAIL PROTECTED] > MIME-Version: 1.0 > Content-Type: multipart/mixed; > boundary="part1_139.19f1c555.2b615826_boundary" > X-Mailer: AOL 7.0 for Windows US sub 10634 > X-Country-Chain: > X-Note: RDNS Real-Origin: [205.188.157.35] > X-Note: SMTP Real-From: [EMAIL PROTECTED] > X-Note: SMTP Real-To: (1) [EMAIL PROTECTED] > X-Note: Tests Failed, If Any: None > X-Note: WEIGHT, If Any: 0 > > > --part1_139.19f1c555.2b615826_boundary > Content-Type: text/plain; charset="US-ASCII" > Content-Transfer-Encoding: 7bit > > > > --part1_139.19f1c555.2b615826_boundary > Content-Type: message/rfc822 > Content-Disposition: inline > > Return-Path: <[EMAIL PROTECTED]> > Received: from rly-xb04.mx.aol.com (rly-xb04.mail.aol.com [172.20.105.105]) > by air-xb02.mail.aol.com (v90.10) with ESMTP id MAILINXB21-0121171850; Tue, > 21 Jan 2003 17:18:50 -0500 > Received: from recomm1.onlinerecommerce.com ([66.109.35.141]) by > rly-xb04.mx.aol.com (v90_r1.1) with ESMTP id MAILRELAYINXB43-0121171810; > Tue, 21 Jan 2003 17:18:10 -0500 > Received: by recomm1.onlinerecommerce.com (Postfix, from userid 33) > id A934945775; Tue, 21 Jan 2003 15:32:15 -0500 (EST) > To: [EMAIL PROTECTED] > From: "" <[EMAIL PROTECTED]> > Subject: Re: gmt Super Bowl Report 01/21/2003 > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="----=_NextPart_000_0005_01C2045D.33A4E770" > Message-Id: <[EMAIL PROTECTED]> > Date: Tue, 21 Jan 2003 15:32:15 -0500 (EST) > X-Mailer: Unknown (No Version) > > > ------=_NextPart_000_0005_01C2045D.33A4E770 > Content-Type: text/plain; > charset="US-ASCII" > Content-Transfer-Encoding: 7bit > Content-Transfer-Encoding: quoted-printable > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.