On Tue, Jul 18, 2000 at 06:35:18PM -0700, Jeff Carnahan wrote:
> Does anyone have more details on this, or perhaps a filter for this type of
> virus?
J C Lawrence has posted a copy of the BUGTRAQ advisory.
I've added a simple filter stanza that attempts to freeze messages with
abnormally long Date: headers (rather than trying to check for extra space
preceeding the GMT section specifically):
if ${length_40:$header_date:} is not $header_date: then
freeze text "message has a suspiciously long Date: header"
endif
--
Jim Tittsler, Tokyo
Python Starship http://starship.python.net/crew/jwt/
