> I have started filtering out HTML mail by looking for the html 
> tag and head tag (brackets removed so my filter doesn't block this)

FYI, blocking all HTML is a very risky practice.  Although I'd love it if HTML E-mail 
hadn't been invented, LOTS of people use it.  Also, if you have your E-mail client set 
up not to show the HTML, you usually WILL see the message, just without the HTML, so 
you may not have an idea of how many people really use it.

Also, I believe it is irrelevant to this security flaw.  What I read from Microsoft 
claimed that it occured when the "Date: " header was corrupted.  They didn't mention 
HTML at all.
                                -Scott
Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to