On Thu, 8 Sep 2011, Edward Prendergast wrote:
I'm seeing CTYPE_NULL triggering for certain messages from gmail.
If I compare a message that doesn't trigger CTYPE_NULL:
Content-Type: multipart/related;
With one that does:
Content-Type: multipart/related;
CTYPE_NULL certainly shouldn't fire on either of those. Are they really
identical, or is that a cut-and-paste error? Are those complete copies of
ALL of the Content-Type headers in the message?
Would it be possible to post the full FP message to a pastebin? Given what
we're looking at, anonymization of email addresses, host names and body
content shouldn't affect the analysis, just make sure you don't alter any
of the MIME-related headers.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
When I say "I don't want the government to do X", do not
automatically assume that means I don't want X to happen.
-----------------------------------------------------------------------
9 days until the 224th anniversary of the signing of the U.S. Constitution
