Hi all,
i'm using Exim 3.22 with system.filter 0.17.
As you can seen from details of message in attach, this exe attachment was
not blocked from exim.
The strange thing is that if i attach this exe file and resend it to my
email, the filter works correctly.
Naturally that attachment was a virus.
Can you help me?
Thanks
P.S. i've changed the "exe" string with "changed"
> Received: from mail.getseurope.it (192.168.20.10 [192.168.20.10]) by
> server-exc.siliani.it with SMTP (Microsoft Exchange Internet Mail Service
> Version 5.5.2653.13)
> id T491JSDM; Mon, 8 Oct 2001 00:57:57 +0200
> Received: from [216.136.174.113] (helo=smtp016.mail.yahoo.com)
> by mail.getseurope.it with smtp (Exim 3.22 #1)
> id 15qMlv-00029z-00
> for carlo.orlanducci@???; Mon, 08 Oct 2001 00:51:47
+0200
> Received: from ppp-82-207.21-151.libero.it (HELO aragorn.yahoo.it)
> (151.21.207.82)
> by smtp.mail.vip.sc5.yahoo.com with SMTP; 7 Oct 2001 22:58:33 -0000
> X-Apparently-From: <aragorn?wingfoot@???>
> Message-Id: <5.1.0.14.2.20011008000841.009f06f0@???>
> X-Sender: aragorn_wingfoot/pop.mail.yahoo.it@???
> X-Mailer: QUALCOMM Windows Eudora Version 5.1
> Date: Mon, 08 Oct 2001 00:54:06 +0200
> To: carlo.orlanducci@???
> From: "Aragorn, Isildur's Heir" <aragorn_wingfoot@???>
> Subject: colloquio
> Mime-Version: 1.0
> Content-Type: multipart/mixed;
> boundary="=====================_3588544==_"
>
> --=====================_3588544==_
> Content-Type: text/plain; charset="iso-8859-1"; format=flowed
> Content-Transfer-Encoding: quoted-printable
>
> --=====================_3588544==_
> Content-Type: application/octet-stream; name="curriculum.CHANGED"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment; filename="curriculum.CHANGED"
>
>
