On Mon, Nov 27, 2006 at 03:04:54PM +0000, Tony Finch wrote:
> I'm thinking of trying matches against (parts of) binary attachments. The
> only way I can think of doing this is using full rules to match fragments
> of base64.

A plugin will do it much better.  For instance, you'll be able to limit your
search against binary attachments. :)

> Also, I believe that a lot of legitimate messages (from Microsoft MUAs)
> contain NULs, typically at the end of attachments. Therefore my servers
> strip NULs rather than rejecting them. Insert usual rant about the quality
> of standards conformance in legitimage email :-(

At the end of attachments in terms of the raw or encoded version?  So far:

  1.138   1.3665   0.0016    0.999   0.87    1.00  NULL_IN_BODY

which works for me.  I don't think they're common in any meaningful way.

-- 
Randomly Selected Tagline:
Q: Don't you know who our President is?
 A: A working class man who started out with nothing in life but two strong
    hands and a brain, and now has to make due with just the hands.
         - http://slashdot.org/comments.pl?sid=189485&cid=15602732

Attachment: pgpcWmv4VQbDO.pgp
Description: PGP signature

Reply via email to