* Jeremy Oddo <[EMAIL PROTECTED]> [020912 21:53]: > http://online.securityfocus.com/archive/1/291514/2002-09-09/2002-09-15/0 > > So, I guess the question is this: does a solution like > qmail/vpopmail/qmail-scanner assemble the email before it drops it into > the virtual user's mailbox? Seems like it *would* but I haven't looked > much into it.
If you're willing to pay the price of stopping legitimate fragmented messages (I am because my user's MUA won't understand them anyhow) there is a quick fix for qmail-scanner... message/partial.* Virus-content-type: Possible message fragmentation exploit -Johan -- Johan Almqvist http://www.almqvist.net/johan/qmail/
msg08847/pgp00000.pgp
Description: PGP signature
