EMERGENCY: MyParty

Julian Field jkf at ecs.soton.ac.uk
Mon Jan 28 18:18:57 GMT 2002


At 17:19 28/01/2002, you wrote:
>Julian Field wrote:
> > There is one new configuration variable "Scan All Messages" which forces it
> > to even scan plain-text messages which were previously thought to be
> > perfectly harmless (and have proved to be until now). The default is "yes"
> > so don't worry if you forget to update your mailscanner.conf.
> >
> > This will unfortunately cause an increase in the system load on your
> > MailScanner servers, as now every plain-text message will be scanned as
> > well as every MIME message.
>
>I don't understand! (Nothing new there!) The Sophos information on MyParty
>suggests that the executable is just another executable attachment. Have I
>missed something?

It's not a proper attachment, it's just uuencoded data stuffed in-line in
the main body of the (plain text) message. There are no MIME headers at
all, or anything. It's just in-line data, which apparently some email
clients appear to identify, decode, and present like an attachment.
--
Julian Field                Teaching Systems Manager
jkf at ecs.soton.ac.uk         Dept. of Electronics & Computer Science
Tel. 023 8059 2817          University of Southampton
                             Southampton SO17 1BJ



More information about the MailScanner mailing list