[Pymilter] RE: You are correct, it is a bug (rejecting non-SRS)

[Stuart D. Gathman]

On Thu, 2 Jun 2005, Alex Savguira wrote:

> >Since supporting the new email package in python2.4, there are bugs in the
> >attachment scanning.  Supporting earlier python versions seems to require an
> >alternate mime.py implementation.
> 
> So what's the conclusion, does it mean, that because attachment scanning is
> buggy,  you are not planning such support or that you will wait for the next
> release/bug fix ?

The problem in 2.4 is that it no longer throws an exception for corrupted
rfc822 attachments.  Instead, the text of the corrupted attachment is included
verbatim without parsing into parts.  Unfortunately, this is one of the
ways in which virus writers sneak their wares by.  Typically, they leave
out the terminating boundary, but Outhouse is perfectly happy to 
tolerate the missing boundary and run the virus code.

-- 
	      Stuart D. Gathman <stuart at bmsi.com>
    Business Management Systems Inc.  Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flamis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.