I wonder whether these two lines indicate that there were actually two DIFFERENT MIME segments? One was a base-64 encoded attachment of "Invoice.html" - which might have matched your BANEXT and been banned.
But the first segment (maybe the body of the email?) was also "[text/html]" formatted. During virus scanning, it was temporarily referred to as "0.html", possibly containing the malicious code. But, since it was the email BODY not actually an attached FILE, it would not have been subject to the BANEXT rule? I guess the question is, was the virus really in the Invoice.html or was it in the "0.html"? ############################################################# This message is sent to you because you are subscribed to the mailing list <[email protected]>. To unsubscribe, E-mail to: <[email protected]> To switch to the DIGEST mode, E-mail to <[email protected]> To switch to the INDEX mode, E-mail to <[email protected]> Send administrative queries to <[email protected]>
