--
On Mon, Apr 29, 2002 at 05:21:52PM -0700, David Gardner wrote:
| I'm running Exim 3.22 and am having trouble with the Klez worm arriving
| in my user's mailboxes. The standard "suspicious" attachment filter does
| not seem to be doing its job anymore.
|
| As the subject line suggests, I'd like to know when the header end and
| the message body begin when content type is multipart message. If the
| header is considered everything up till the first boundary marker, I'm
| in trouble. If every part's header is examined, then the software is not
| working correctly.
|
| Do later versions of Exim handle multipart messages correctly?
Yes and no. The headers are everything up to the first CRLFCRLF
sequence. (IOW up to the first blank line). Everything else is the
body. This is how messages are defined in RFC 822 and 2822. Exim
does not try and parse MIME encodings.
-D
--
(E)ventually (M)allocs (A)ll (C)omputer (S)torage
GnuPG key :
http://dman.ddts.net/~dman/public_key.gpg
--
[ Content of type application/pgp-signature deleted ]
--
