Sobig.F@mm.enc

[Rose, Bobby]

I'm the same way.  Sobig is being caught for the most part but you have
different versions going on here.  You have mm and mm.enc.  Enc is where
it's encoded into the mime header.

-----Original Message-----
From: G. Armour Van Horn [mailto:vanhorn at whidbey.com] 
Sent: Sunday, September 07, 2003 3:28 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Sobig.F at mm.enc


I'm running 4.23-11, and most SoBig messages are getting caught not only
by both virus scanners (f-prot and ClamAV) but also based on file name
by MailScanner itself, since .pif files shouldn't be allowed to start
with.

It's not a problem with recent versions, how recent is your setup?

Van

"Rose, Bobby" wrote:

> MailScanner doesn't seem to be catching this.  I thought Ms was 
> written to cehck for the mime enclosed in header stuff.  Did this get 
> broken along the later versions.
>
> -=Bobby

--
----------------------------------------------------------
Sign up now for Quotes of the Day, a handful of quotations
on a theme delivered every morning.
Enlightenment! Daily, for free!
mailto:twisted at whidbey.com?subject=Subscribe_QOTD

For web hosting and maintenance,
visit Van's home page: http://www.domainvanhorn.com/van/
----------------------------------------------------------