[68327] in North American Network Operators' Group
Re: [Fwd: [alex@yuriev.com] Confirmation of your message requested]
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Mon Mar 8 20:58:57 2004
Date: Tue, 09 Mar 2004 07:20:22 +0530
From: Suresh Ramasubramanian <suresh@outblaze.com>
To: "Stephen J. Wilcox" <steve@telecomplete.co.uk>
Cc: "Laurence F. Sheldon, Jr." <LarrySheldon@cox.net>,
NANOG <nanog@merit.edu>
In-Reply-To: <Pine.LNX.4.44.0403082105030.15621-100000@server2.tcw.telecomplete.net>
Errors-To: owner-nanog-outgoing@merit.edu
Stephen J. Wilcox [3/9/2004 2:35 AM] :
>>It turns out tha message I forwarded had a "null.eml" attachment
>>that I did not notice and remove.
>>
>>I am now being mailbombed by AV software all over the place!
>
>
> The attachment is rfc822, it has a null name. Looks ok to me.. broken AV?
At least one open source virus scanner has a cookbook config that treats
.eml as an "executable attachment" and discards email that has a .eml
attachment.
Makes for fun when forwarding an OE generated email using Thunderbird,
I've found.
srs
--
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations