FixMaliciousSubjects is cutting legim Subject lines.
Sveinn G. Gunnarsson
sveinn at SVEINNG.COM
Wed Feb 4 15:25:21 GMT 2004
Hi Julian.
I have found that the FixMaliciousSubjects sub in SweepContent.pm is cutting
of non-exploit subject lines. These mails are sent from Lotus Notes server.
I have not seen this happening when receiving mail from other servers.
Here is a header-snip of one such email:
From: yy at yy.is
In-Reply-To:
<OF5E723B86.F88E8AE4-ON00256E2F.0034C5CC-00256E2F.0034FB02 at LocalDomain>
Subject: Re: WinCABAS:
=?iso-8859-1?Q?Bifei=F0averkst=E6=F0i_=C1rna_G=EDslasonar_hf=2C_MV128-02?=
=?us-ascii?Q?=2E=2E?= =?iso-8859-1?Q?=ED__cabas=2C_G=F3l?=
To: xx at xx.is
I have disabled these three lines in SweepContent.pm to let these subjects
through, but a more elegant soulution would be nice :)
# $newsubject =~ s/\s{20,}.*\..{1,4}\s*$//; # Delete file extensions at end
of filename
# $newsubject =~ s/\s*$//g;
# $newsubject =~ s/\s{20,}//g;
Thanks in advance !
Sveinn G. Gunnarsson
UNIX Specialist
Og Vodafone
Sidumuli 28
108 Reykjavik
Iceland
www.ogvodafone.is
More information about the MailScanner
mailing list