[Mimedefang] filter_multipart stripping forwarded messages from KMail

Kenneth Porter shiva at sewingwitch.com
Tue Oct 28 19:42:27 EST 2003


--On Tuesday, October 28, 2003 3:25 PM -0800 Kelson Vibber <kelson at speed.net>
wrote:

> Well, it turns out that filter_bad_filename was not triggering on "forwarded
> message" (which was set as the name field of Content-Type), but on the
> Content-Description field, which KMail populates with the original sender's
> address and the original subject.  And the original sender's address ended
> in .com.

Given the vulnerability of our favorite broken email client, I'd say the right
fix here is to change KMail's behavior. Otherwise the next virus writer can
just spoof a KMail message hoping to sneak a .com file past a lenient filter.




More information about the MIMEDefang mailing list