[Mimedefang] Another RND bug spam...

[Paul]

Just got a spam in MD/SA did not catch. Yet... Easy to do as it's got a %RND* bug in the headers. Just a heads up, I put the relevany headers below...

[...]
Subject: 14 format
Mime-Version: 1.0
X-MIMETrack: Itemize by SMTP Server on SMTP1/Irgidvwwpr(Release 5.0.11  |%RND_DATE_ONLY) at
 %RND_MONTH_DAY_YEAR %RND_TIME,
	Serialize by Router on SMTP1/yahoo.com(Release 5.0.11  |%RND_DATE_ONLY) at
 %RND_MONTH_DAY_YEAR %RND_TIME,
	Serialize complete at %RND_MONTH_DAY_YEAR %RND_TIME,
Date: Wed, 07 Apr 2004 20:11:41 -0600
[...]


Here's my entry for SA's local.cf to snatch this one...

header HEAD_RND_DYT             X-MIMETrack =~ /\%RND_MONTH_DAY_YEAR/
describe HEAD_RND_DYT           X-MIMETrack fits RND_MONTH_DAY_YEAR pattern
score HEAD_RND_DYT              5.0

Hope this helps...

Paul