On Fri, 2004-01-09 at 11:39, Gary Funck wrote:
> 
> > From: Lindsay Snider
> > Sent: Friday, January 09, 2004 8:03 AM
> > 
> > 
> > I'm running pbw dated 2003-11-13.  Backhair recently hit hard on a piece
> > of ham.  The rules matched on an uuencoded pdf attachment. Does anyone
> > have any insight on how I might prevent these from hitting in the
> > future.  I'm not sure if all uuencoded messages are susceptible, if its
> > pdf uuencoded messages or if this was a fluke.
> > 
> > 
> 
> Was the PDF file sent as a legit MIME attachment, or was the uuencoded text
> just plunked into the body of the message, in the old-style method of
> sending files via e-mail?

It looks to be old style.  Here are the relevant headers:

Message-ID: <[EMAIL PROTECTED]>
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.4510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Importance: Normal

and the beginning of the attachment

begin 666 inventory summary 31dec2003.pdf
M)5!$1BTQ+C,-)>+CS],-"C8@,"!O8FH-/[EMAIL PROTECTED],:6YE87)I>F5D([EMAIL PROTECTED]/
M(#@@#2](([EMAIL PROTECTED](#$X-"!=( TO3" T-#8P,B [EMAIL PROTECTED](X,[EMAIL 
PROTECTED](#$@


> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Perforce Software.
> Perforce is the Fast Software Configuration Management System offering
> advanced branching capabilities and atomic changes on 50+ platforms.
> Free Eval! http://www.perforce.com/perforce/loadprog.html
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
-- 
Lindsay Snider <[EMAIL PROTECTED]>



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to