Author: Nico Erfurth Date: To: Matthew Byng-Maddick, exim-users Subject: Re: [Exim] Blocking fragmented messages
Matthew Byng-Maddick wrote: > On Mon, Oct 07, 2002 at 03:47:09PM +0200, Sheldon Hearn wrote:
>
>>BugTraq about the idea of breaking up a message into multiple fragments
>>to bypass content filtering, relying on the MUA to reassemble the
>>fragments.
>>Does anyone have any references?
>
>
> It was on bugtraq, I can't find the original thread, called something
> like ``Bypassing content filters'', but there's a related thread with
> two messages:
> http://online.securityfocus.com/archive/1/293340 >
> The RFC is RFC2046, if it helps.
Maybe someone should make a list of such "malicious" Content-Types, so
we can build a generic filter against them.