OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Changed subject (was Re: reg. virus named ...)
From: Bennett Todd (betrahul.net)
Date: Thu May 04 2000 - 13:46:26 CDT

2000-05-04-14:41:37 Liviu Daia:
> Sorry to jump into this interesting debate, but the above
> rule won't catch VBS attachments (or the ILOVEYOU virus, for that
> matter). The problem is header_checks will match only the top
> level "Content-Type", which is normally "multipart/mixed", no
> matter what other attachments it contains.

Very true, and a good point; I shouldn't have tried to suggest the
change to the pattern as given.

I'm thinking about this in the context of a program I'm trying to
write now, to filter email, possibly transforming the email as it
goes through; this program will scan the entire message.

-Bennett

  • application/pgp-signature attachment: stored