[68327] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: [Fwd: [alex@yuriev.com] Confirmation of your message requested]

daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Mon Mar 8 20:58:57 2004

Date: Tue, 09 Mar 2004 07:20:22 +0530
From: Suresh Ramasubramanian <suresh@outblaze.com>
To: "Stephen J. Wilcox" <steve@telecomplete.co.uk>
Cc: "Laurence F. Sheldon, Jr." <LarrySheldon@cox.net>,
	NANOG <nanog@merit.edu>
In-Reply-To: <Pine.LNX.4.44.0403082105030.15621-100000@server2.tcw.telecomplete.net>
Errors-To: owner-nanog-outgoing@merit.edu


Stephen J. Wilcox  [3/9/2004 2:35 AM] :

>>It turns out tha message I forwarded had a "null.eml" attachment
>>that I did not notice and remove.
>>
>>I am now being mailbombed by AV software all over the place!
> 
> 
> The attachment is rfc822, it has a null name. Looks ok to me.. broken AV?

At least one open source virus scanner has a cookbook config that treats 
.eml as an "executable attachment"  and discards email that has a .eml 
attachment.

Makes for fun when forwarding an OE generated email using Thunderbird, 
I've found.

	srs

-- 
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations


home help back first fref pref prev next nref lref last post