Message strangeness from ZDnet

[James Gray]

    [ The following text is in the "utf-8" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

On Thu, 17 Mar 2005 06:52 pm, Julian Field wrote:
> My best guess is that they were either part of a form, or were IFrames.
> As shipped, MailScanner disarms IFrames (they have been used in *so*
> many attacks!). You can set more of the "Log" options to "yes" to see
> more in your logs.

Agreed - I normally disarm forms, iframes, and block scripts.  I've made all
of these into rule files, and allowed stuff from ZDnet.  I'll see what
happens tomorrow.  Thanks for the suggestions (I've increased the logging
options too).

Cheers,

James
--
One can't proceed from the informal to the formal by formal means.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!