Re: [Exim] Blocking fragmented messages

Top Page
Delete this message
Reply to this message
Author: Nico Erfurth
Date:  
To: Matthew Byng-Maddick, exim-users
Subject: Re: [Exim] Blocking fragmented messages
Matthew Byng-Maddick wrote:
> On Mon, Oct 07, 2002 at 03:47:09PM +0200, Sheldon Hearn wrote:
>
>>BugTraq about the idea of breaking up a message into multiple fragments
>>to bypass content filtering, relying on the MUA to reassemble the
>>fragments.
>>Does anyone have any references?
>
>
> It was on bugtraq, I can't find the original thread, called something
> like ``Bypassing content filters'', but there's a related thread with
> two messages:
> http://online.securityfocus.com/archive/1/293340
>
> The RFC is RFC2046, if it helps.


Maybe someone should make a list of such "malicious" Content-Types, so
we can build a generic filter against them.


ciao