On Thu, 8 Nov 2018, Bill Cole wrote:

On 8 Nov 2018, at 21:55, John Hardin wrote:

On Thu, 8 Nov 2018, Amir Caspi wrote:

On Nov 8, 2018, at 7:41 PM, John Hardin <jhar...@impsec.org> wrote:

Sure, but I't also prefer to have a sample to test on before committing. I'll see if I can get the pastebin to work (i.e. fix the boundary)

I can send you some new spamples via attachment, privately.

No, the pastebinned ones work unaltered.

The problem with that: they are mangled in a way that prevents HTML interpretation of then HTML part. Hence a 'body' rule will match the uninterpreted entities. For the real world, i.e. with proper MIME structure, I think you need a 'rawbody' rule to match against the uninterpreted entities.

Okay, I will confirm that today too. Thanks for pointing it out.

I have confirmed that de-munging the boundaries fixes them to allow proper MIME interpretation. In both cases, the boundary line between the 2 MIME parts is apparently unchan ged, so you can just use it to fix the other 3 places that it needs to match.

Okay.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Activist: Someone who gets involved.
  Unregistered Lobbyist: Someone who gets involved
       with something the MSM doesn't approve of.         -- WizardPC
-----------------------------------------------------------------------
 2 days until Veterans Day

Reply via email to