Re: [exim] Exim header check and mailsploit?

Pàgina inicial
Delete this message
Reply to this message
Autor: Jeremy Harris
Data:  
A: exim-users
Assumpte: Re: [exim] Exim header check and mailsploit?
On 06/12/17 16:12, Adrian Zaugg wrote:
> The mailsploit attack relies on special chars like newline or the nul
> character encoded in base64 or quoted-printable. In my opinion encoded
> strings in mail headers should get decoded for validity checking, e.g
> when setting in an ACL: require verify = headers_syntax
> Am I wrong with this assumption?


RFC 5322 says nothing about encoding.
--
Cheers,
Jeremy