On Fri, Sep 19, 2003 at 05:31:33PM -0400, Bruce Pennypacker wrote: > The problem I'm finding with the latest worm is that sometimes the MIME > attachment for the actual worm isn't included in the e-mail. I've > already set MICROSOFT_EXECUTABLE high but I'm still getting a few > e-mails an hour that consist of the worms e-mail without the worm > actually attached. Since there's no executable SA isn't filtering these > properly. So relying on this as a method to block worms like this > doesn't always work.
If the worm isn't even attached, then I wouldn't consider it to be a huge problem. A false negative, but not a dangerous one. But YMMV, I guess. ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
