On Mon, Sep 22, 2003 at 02:55:52PM -0500, Ed Wilts wrote:Oops here is again one which sliped through. Here are the headers:
On Mon, Sep 22, 2003 at 02:07:12PM -0500, Benjamin J. Weiss wrote:
I think I may have just figured it out. After the sendmail patch came out,I'm still trying to find the time to figured out why neither f-prot nor MailScanner is catching these. They've caught other stuff but not this one. The attachement has a .exe extension which I block by default, and not even the attachment is getting stripped.
Is anybody/everybody else seeing this make it through
MailScanner/f-prot?
sendmail was automatically being restarted when it should not have been
- it should have been kicked off from MailScanner. I'll see if this
clears things up any. At the rate they've been coming in, I should know
in an hour or less.
Following up my post, it appears like the sendmail rpm update got me.
The easy fix:
# service MailScanner status You'll see that it's not running properly
# service MailScanner stop
# service MailScanner start
You'll see that it's now right.
------------
X-UIDL: 1064303724561.277086334.mig29
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-AV-Scanned: yes 52fcf6c3371ff9f0576c9c1ee9029c95
Received: from fozzy.ieo.it (193.204.96.12:2914)
by cmb16-74.dial-up.arnes.si (194.249.51.74:25) with [XMail 1.17 (Linux/Ix86) ESMTP Server]
id <S65C9> for <[EMAIL PROTECTED]> from <[EMAIL PROTECTED]>;
Tue, 23 Sep 2003 09:55:24 +0200
Received: from CONVERSION-DAEMON by ieo.it (PMDF V5.2-31 #27378)
id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Tue,
23 Sep 2003 09:48:02 CET
Received: from oelr ([192.168.97.204]) by ieo.it (PMDF V5.2-31 #27378)
with SMTP id <[EMAIL PROTECTED]>; Tue, 23 Sep 2003 09:48:01 +0100 (CET)
Date: Tue, 23 Sep 2003 09:48:01 +0100 (CET)
Date-warning: Date header was inserted by ieo.it
From: [EMAIL PROTECTED]
Subject: Current Internet Critical Patch
To: Customer <[EMAIL PROTECTED]>
Message-id: <[EMAIL PROTECTED]>
MIME-version: 1.0
Content-type: MULTIPART/MIXED; BOUNDARY="Boundary_(ID_873sM04n8RTLsplm4fEG4g)"
--Boundary_(ID_873sM04n8RTLsplm4fEG4g)
Content-type: MULTIPART/related;
BOUNDARY="Boundary_(ID_tFZ+W3hswUjG9rCOoFOJxA)"; type="multipart/alternative"
--Boundary_(ID_tFZ+W3hswUjG9rCOoFOJxA) Content-type: MULTIPART/ALTERNATIVE; BOUNDARY="Boundary_(ID_WEFdxryrJIbPqA57keDAcw)"
--Boundary_(ID_WEFdxryrJIbPqA57keDAcw) Content-type: text/plain Content-transfer-encoding: quoted-printable
--Boundary_(ID_873sM04n8RTLsplm4fEG4g) Content-type: application/x-msdownload; name="upgrade656.exe" Content-disposition: attachment Content-transfer-encoding: base64 --------------------- And it keeps bombing the net.
Sasa
-- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
