Still catching "Possible Microsoft security vulnerability attack"

[Mike Kercher]

Allow IFrame Tags = No <?>


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
Behalf Of John Hanks
Sent: Monday, October 07, 2002 11:23 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Still catching "Possible Microsoft security vulnerability
attack"


I must still be doing something wrong, I now have in my mailscanner.conf
file the following lines:

Allow IFrame Tags
Allow Codebase Tags

but I am still catching messages with this report. Am I missing something
obvious again? Most of the messages quarantined have had iframe tags. There
was one that I couldn't locate either an iframe tag or object codebase tag
in, but it had some encoded areas that may have contained them and I didn't
dig that deep yet.

Thanks,

jbh