Hmm....
I wonder if it's words ending with "port" and not just "ort"!

-RoNNY




Matt Jordan <[EMAIL PROTECTED]>
Sent by: Mailing list for discussion of Firewall-1
<[EMAIL PROTECTED]>
06/18/2004 02:29 PM
Please respond to Mailing list for discussion of Firewall-1


        To:        [EMAIL PROTECTED]
        cc:
        Subject:        [FW-1] SMTP resource bug



Configuration:

I am currently running FW1 NG/AI R54 with HF10.

I have a rule for INBOUND SMTP mail, and I have configured an SMTP
resource
to perform weeding (all available boxes are checked) and attachment
handling
of "message\partial".

Problem:

Whenever an inbound HTML(not Rich or Plain text) email comes through the
firewall certain words ending in "ort" have an exclamation point added to
them.

For example: "I will be late for the airport if we don't hurry"
Looks like:  "I will be late for the airport!if we don't hurry"

This occurs in attachments including Word docs and PDF files too!

Not all words ending in "ort" are affected but several are. I've removed
the
resource from the rule and all mail arrives normally. I re-add the
resource
and the problem returns.

I would like to use this resource because it is very effective in stopping
the "MHTMLRedir.exploit".

Any ideas on the cause? Thanks, MJ

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================



=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to