Strange filename construct being blocked?

[Julian Field]

    [ The following text is in the "UTF-8" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

The filename you get in the report is the "sanitised" one, not the 
original. So the original filename was a lot longer than this.

David Höhn wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: RIPEMD160
>
> Hello.
>
> I was seing a message like this one:
>
> Very long filenames are good signs of attacks against Microsoft e-mail
> packages (trpix.gif%3F%26rdm.net)
>
> now I know that %3F is ? and %26 is &. So that would make the filename
>
> trpix.gif?&rdm.net
>
> Is this some sort of new attack?
>
> - -d
>
> PS: Latest Stable MailScanner
>
> - --
> nee anata wo mitsukete soshite nidoto wasurezu
> ~      donna ni munega itakutemo soba ni iru no
> ~                         zutto...zutto...zutto
> Key fingerprint = FD77 F0B7 5C65 F546 EB08  A4EC 3CCA 1A32 7E24 291E
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.6 (Darwin)
>
> iD8DBQFBruDUPMoaMn4kKR4RA+BjAJ9KAEkrDZuPUKtMzSVnXfvlQYgS6wCgnuF0
> RIUbIBbkJhJhZMqgohvGcZ0=
> =Kz2E
> -----END PGP SIGNATURE-----
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!