David Snowdon asked:
> Has anyone else seen messages containing the Bugbear-A virus
> getting past the Exim system_filter file (Version 0.17 from the
> Web site)? We are running 4.10.
>
> I haven't yet been able to trap a raw message to investigate
> in detail.
Yes, unfortunately I have. I believe it's because its using unquoted
filenames containing spaces.
(s/^K/C/) Example:
Kontent-Type: audio/x-midi;
name=Katie's Folder.doc.pif
Kontent-Transfer-Encoding: base64
Kontent-ID: <947zm5nJaHzaH>
Cheers,
Matt.
