[Mimedefang] Warning: Malformed MIME virus in the wild

[Kevin A. McGrail]

On 10/10/2013 4:46 PM, David F. Skoll wrote:
> full __RP_ZIP_TYPE /name\s{0,2}=\s{0,2}.{0,80}\.zip/i
> full     __RP_EMPTY_CTYPE /Content-Type:\s{0,4};/i
> meta	 RP_ZIP_ECTYP __RP_EMPTY_CTYPE && __RP_ZIP_TYPE
> describe RP_ZIP_ECTYP Zip file attachment with bogus Content-Type: header
> score	 RP_ZIP_ECTYP 15
Thanks a lot for this heads-up.

regards,
KAM