[Fwd: RE: [Mimedefang] not catching test viruses]

[Cormack, Ken]

> The ones that slipped by for me were #17,#18.
>
> 19# and 20# showed up, but they were stripped, and it was just a blank
> emails.

The bodies were blank, but look at the headers.  (In Outlook, Open the
message, then go to "View/Options" and scroll through the Internet header.)

>
> You can catch clsid with this extension match:

> $bad_exts =
'<snip>... |\{[^\}]+\})';

> This is my current bad_ext match.

The above is in my bad_exts list, too, but still the CLSID seemed to slip
through (dont know why yet... I see no typo in my definition.)

Ken