Len Conrad wrote:

> I just got one that got past my IMGate .exe  blocking and then past Kaspersky.
> 
<snip>
> 
> so I bet it's coming through my IMGate the first time with it's sneaky 
> "broken" MIME stuff, and the Eudora fixes it up, so when Eudora sends to 
> IMGate, IMGate catches it.
> 
> anybody know the regex to stop it in its original broken mime form?

I'm testing the following based on the two I received:

/^R0lGODlhaAA7APcAAP\/\/\/\+rp6puSp6GZrDUjUUc6Zn53mFJMdbGvvVtXh2xre8bF1x8cU4yLprOy/ 
REJECT

That's the first line of the base64 enocoded attachment.  I'll give it some 
time and see if it works.

> 
> and this the first time Kaspersky has let us down.  It wouldn't be so 
> catastrophic if sven wasn't also so tricky in the mime fooling
> 
> Len
>    
> 
> 


-- 
Chris Scott
Host Orlando, Inc.
http://www.hostorlando.com/



Reply via email to