[Mimedefang] Amusing: Simple word filtering SNAFU, emphasis on the F

Richard Laager rlaager at wiktel.com
Wed Feb 28 11:53:29 EST 2007


On Wed, 2007-02-28 at 09:59 -0500, WBrown at e1b.org wrote:
> Got this  back from a downstream mail/spam admin for our CanIt instalation 
> who was troubleshooting why it wasn't getting delivered:
> 
> Feb 27 2007 12:46:09 mdf2 postfix/cleanup[371]: 6B9EE60044: discard: body 
> aW5kaXZpZHVhbGl6ZWQgZWR1Y2F0aW9uIHByb2dyYW0gKElFUCkgdGhhdCBpbmNsdWRlcyBhdmVy 
> from servername; from=<user at domain> to=<recip at otherdomain> proto=SMTP 
> helo=<servername> 
> 
> What are the odds that a base64 encoding would include the F-bomb?

Pretty high. We had a user who filtered on "sex" and some four letter
words, and they were having (their words) "any message with an
attachment" blocked. I figured out the actual probabilities then, but
I've forgotten them now.

Richard

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://lists.mimedefang.org/pipermail/mimedefang_lists.mimedefang.org/attachments/20070228/16b96b00/attachment.sig>


More information about the MIMEDefang mailing list