[Mimedefang] Warning: Malformed MIME virus in the wild
Kevin A. McGrail
KMcGrail at pccc.com
Thu Oct 10 17:00:33 EDT 2013
On 10/10/2013 4:46 PM, David F. Skoll wrote:
> full __RP_ZIP_TYPE /name\s{0,2}=\s{0,2}.{0,80}\.zip/i
> full __RP_EMPTY_CTYPE /Content-Type:\s{0,4};/i
> meta RP_ZIP_ECTYP __RP_EMPTY_CTYPE && __RP_ZIP_TYPE
> describe RP_ZIP_ECTYP Zip file attachment with bogus Content-Type: header
> score RP_ZIP_ECTYP 15
Thanks a lot for this heads-up.
regards,
KAM
More information about the MIMEDefang
mailing list