[Snort-sigs] (RE : rules update) Hope this help (bis)

Matt Kettler mkettler at ...189...
Wed Dec 19 10:31:02 EST 2001

Actually, yahoo took the .sh attachment just fine.. your first email 
dropped the attachment to me intact.

It appears someone who is subscribed to the list (presumably from 
anchorgaming.com based on the headers) works for a company with a 
mailserver that replies to the "to" and "from" after applying a (lame?) 
attempt to detect viruses by blocking extensions. I presume that it uses a 
.sh* filter trying to block windows .shb and .shs files. *yawn*

At 03:02 PM 12/19/2001 +0100, David Bouscasse wrote:
>As Yahoo's filter does no accept .sh attachment, a
>tar.gz one...

More information about the Snort-sigs mailing list