procmail
[Top] [All Lists]

Re: IL0VEY0U has mutated

2000-05-08 04:56:09
At 19:24 -0400 04 May 2000, Bennett Todd <bet(_at_)rahul(_dot_)net> wrote:
so it'll egrep the "body" as well; the Content header will only show
up within the RFC 822 header if the "attachment" is the first one in
the message, which it generally isn't in these worms.

Actually, the relevant Content- header will be in the RFC 822 header
section only if it's the *only* attachment.  In other cases the RFC 822
header will state a content type of multipart/mixed.

-- 
Aaron Schrab     aaron(_at_)schrab(_dot_)com      http://www.execpc.com/~aarons/
 You have the right to remain silent.  Anything you say will
 be misquoted and used against you.

Attachment: pgp0saCwjk0X4.pgp
Description: PGP signature

<Prev in Thread] Current Thread [Next in Thread>