> so I bet it's coming through my IMGate the first time with it's sneaky
> "broken" MIME stuff, and the Eudora fixes it up, so when Eudora sends to
> IMGate, IMGate catches it.
>
> anybody know the regex to stop it in its original broken mime form?

I have a user with it, and tried to reply back with a quote of the
original header.  Got this:

<[EMAIL PROTECTED]>: host mgW1.MEIway.com[212.73.210.75] said: 550
Error:
    ifr--ame or ila--yer HTML exploit (in reply to end of DATA command)

Hehe.

So, I did something else.  For those of you that do not have a copy to
look at, and try to formulate blocks based off of:

http://www.cybertime.net/sven.html

That is a copy that was sent to me, direct from a user. . . whom I will
not be looking up by IP and time, and giving a call.

--Eric

ps.  Had to munge the words.  Looks like you blocking based soly off the I
words!  LOL.  Whatever works!


Reply via email to