For the record, what I was really suggesting was NOT that John Doe forged the email with the MIME virus representation to make it look like it passed through the listmailer when it fact he actually mailed it directly to everyone on the list. No, that is clearly beyond John Doe's abilities at forgery. That part was a joke. That message clearly DID go through the listmailer, and I was just kidding with Nick, although I was curious about it. Nick suggested that the reason it got through the virus filters was because it was MIME encoded.
Just to be clear, it got through the filters because the *message* had a MIME type of plain/text (or none at all, which amounts to the same thing). But that also made it harmless, unless someone goes to the trouble of turning the MIME-encoded text back into an executable.
Also, the email apparently DID forge the From: address, otherwise brin-l would not have sent it out. I guess the archive software shouldn't give the email addresses (even with @ spelled out) because then people can grab one, forge an email, and get the entire list to receive the spam or virus.
But if anyone figures to play games thus, they'd better also figure out how to do some sort of IP spoofing...
Spam, yes. Viruses, no. At least not in any executable form. AFAIK.
Nick
-- Nick Arnett Director, Business Intelligence Services LiveWorld Inc. Phone/fax: (408) 551-0427 [EMAIL PROTECTED]
_______________________________________________ http://www.mccmedia.com/mailman/listinfo/brin-l
