* Jeremy Oddo <[EMAIL PROTECTED]> [020912 21:53]:
> http://online.securityfocus.com/archive/1/291514/2002-09-09/2002-09-15/0
> So, I guess the question is this:  does a solution like
> qmail/vpopmail/qmail-scanner assemble the email before it drops it into
> the virtual user's mailbox?  Seems like it *would* but I haven't looked
> much into it.  

If you're willing to pay the price of stopping legitimate fragmented
messages (I am because my user's MUA won't understand them anyhow)
there is a quick fix for qmail-scanner...

message/partial.*       Virus-content-type:     Possible message fragmentation exploit

Johan Almqvist

Attachment: msg08847/pgp00000.pgp
Description: PGP signature

Reply via email to