I just got one that got past my IMGate .exe blocking and then past Kaspersky.
When I try to foward it back to my IMGate, IMGate blocks it, from my eudora.log (with the filename obscured with "eee": 1600 32:16.1 Sent: "Content-Type: application/octet-stream; name="q925847.eeeexe"\r\n" 1600 32:16.1 Sent: "Content-Transfer-Encoding: base64\r\n" 1600 32:16.1 Sent: "Content-Disposition: attachment; filename="q925847.eeeexe"\r\n" 1600 32:16.1 Sent: "\r\n" 1600 32:16.1 Sent: "\r\n" 1600 32:16.1 Sent: "--=====================_1247516223==_--\r\n" 1600 32:16.1 Sent: "\r\n" 1600 32:16.1 Sent: ".\r\n" 1600 64:16.3 Rcvd: "550 Error: Attached file has a probscribed type of file extension. Only .zip is permitted. (reject: Content-Type: application/octet-stream; name="q925847.eeeeexe")\r\n" 1600 32:16.3 Sent: "QUIT\r\n" 1600 64:16.3 Rcvd: "221 Bye\r\n so I bet it's coming through my IMGate the first time with it's sneaky "broken" MIME stuff, and the Eudora fixes it up, so when Eudora sends to IMGate, IMGate catches it. anybody know the regex to stop it in its original broken mime form? and this the first time Kaspersky has let us down. It wouldn't be so catastrophic if sven wasn't also so tricky in the mime fooling Len
