Re: Virus emails
On Tuesday 23 September 2003 01:45, Bernd Eckenfels wrote:
> On Tue, Sep 23, 2003 at 12:28:44AM +0200, Mike Hommey wrote:
> > Maybe I'm wrong, but I think an MTA rejecting a mail because of oversized
> > body doesn't have to get the whole body before rejecting the mail. Based
> > on this, it should be possible to reject the mail before it gets fully
> > transfered to the server.
>
> Well, you can reject on the size argument, if you see one, and if it is not
> faked. Otherwise you have to read up to x bytes until you can drop the
> conncetion.
>
> But this has nothing to do with the worms, unless you want to limit your
> mails to max 10k :) In case of spam and virus checking you have to read at
> least the headers, and most likely a lot of the body (till you know the
> attachement type)
Indeed, but you don't have to get the whole 150KB of mail...
Mike
--
"I have sampled every language, french is my favorite. Fantastic language,
especially to curse with. Nom de dieu de putain de bordel de merde de
saloperie de connard d'enculé de ta mère. It's like wiping your ass
with silk! I love it." -- The Merovingian, in the Matrix Reloaded
Reply to: