Dan,
I don't know that this method is any better than yours, but this is
another approach to filtering all HTML messages. Remove all six
instances of capital Z in the following three lines, then place the
three lines in your rules.ima file. Change "trapped" to whatever
you are using (if not NUL):
H~ContZent-Type: text/htZml:trapped
H~ContZent-Type: text/enZriched:trapped
H~ContZent-Type: multipart/alZternative:trapped
Perhaps others can comment on the pros & cons of these two different
approaches to "trapping" all HTML mail.
Gordon
-----
Dan Shadix wrote:
>
> I thought that this was important enough to post on the forum and I haven't
> seen it mentioned here.
>
> SANS Issued a FLASH message today describing a vulnerability that is
> probably the most dangerous programming error in Windows workstation (all
> varieties -- 95, 98, 2000, NT 4.0) that Microsoft has made.
> You are vulnerable to total compromise simply by previewing or reading an
> email (without opening any attachments) if you have one of the affected
> operating systems and have the following installed:
>
> Microsoft Access 97 or 2000
> Internet Explorer 4.0 or higher, including 5.5 (Windows 2000 includes IE 5)
>
> Go to http://www.sans.org/newlook/resources/win_flaw.htm for complete
> details.
>
> I have started filtering out HTML mail by looking for the html tag and head
> tag (brackets removed so my filter doesn't block this) in message bodies.
> Am I correct that this will catch all HTML e-mail, and if not what do I need
> to look for?
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
