gfi.com email vulnerability tests

Peter Bonivart peter at UCGBOOK.COM
Fri Oct 24 23:33:31 IST 2003


There's already a rule covering this in filename.rules.conf:

deny    \s{10,}         Filename contains lots of white space

I wonder why it didn't stop the "hide.hta (lots of space here) "?

/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, MailScanner 4.23-11, SpamAssassin 2.60 + DCC
1.2.9, ClamAV 20030829

Dustin Baer wrote:

> The following spam.assassin.prefs.conf addition will take care of the
> multiple spaces in the subject issue:
>
> header   MULTISPACE Subject =~ /[ ]{10,}$/
> describe MULTISPACE Ten or more spaces
> score    MULTISPACE 5.0
>
> Just be careful it someone requests these from spam quarantine.



More information about the MailScanner mailing list