Detected HTML-specific exploits

Peter Bonivart peter at UCGBOOK.COM
Sat May 1 12:17:52 IST 2004


Andrew Stubbs wrote:
> Allow IFrame Tags = yes
> Allow Form Tags = yes
> Allow Object Codebase Tags = yes

You should have a line like this in MailScanner.conf:

Allow Script Tags = no

If you don't maybe you didn't run the upgrade_MailScanner_conf script?

--
/Peter Bonivart

--Unix lovers do it in the Sun

Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.29.7,
SpamAssassin 2.63 + DCC 1.2.45, ClamAV 0.70 + GMP 4.1.2, Vispan 1.4

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html



More information about the MailScanner mailing list