And a quick follow-up about this.  It appears that it is a spammer that is causing the hit.  Here's a sample of a MIME boundary that Declude is detecting as an invalid COM file:

------=_NextPart_000_00QP_00N2764VQ_00Y.154D01N0
Content-Type: image/gif;
        name="[EMAIL PROTECTED]"
Content-Transfer-Encoding: base64
Content-ID: <[EMAIL PROTECTED]>

Still though, this should get quietly blocked without a bounce because Declude detected the file as being a bogus COM file, just like it does/did with bogus ZIP, JPG and other files, and not use the banned extension bouncing when such a condition is detected.

Matt



Darin Cox wrote:
Yep. I just added SKIPIFEXT COM to my bannotify.eml yesterday.

Darin.
 
 
----- Original Message -----
Sent: Tuesday, March 15, 2005 3:31 PM
Subject: [Declude.Virus] Spam .com files being blocked.

I block .com files.
 
The last 3 days, I've been getting consistent blocking of spam messages referring to a gif file named .com:
Content-Type: image/gif;
        name="wdjgamexmail.com"
 
These are getting blocked, but the users are getting a little tired of the bannotify.eml messages that this triggers.
So I'm reluctantly forced to add SKIPIFEXT COM to my bannotify.eml file.
 
Has anyone else been seeing this?

-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================


Reply via email to