Re: [Security-Discuss] List security

On Jul 7, 2004, at 7:49 AM, Anne Wilson wrote:

> Today I mistakenly posted a message to the expert list with some c code
> attached.  I got a bounce, with the message
>
> quote
> Your message "[expert] Jpeg rescue" on Wed, 7 Jul 2004 14:30:48 +0100 
> was
> rejected because it contains executable files,  virus, or other 
> possible
> harmful content.
> /quote
>
> This sounded as though filtering was working correctly.  However, a few
> minutes later the message *did* appear on list - complete with the c 
> code.
> This does not sound sensible to me.  Maybe this message could be 
> passed to
> whoever looks after list security?  Thanks

Are you sure that bounce came from sympa?  And not from someone else's 
setup who was a recipient on the list?

I get bounces like that all the time when I post new security 
announcements because they're GPG signed.  That's not sympa bouncing 
them but rather the idiot setups of some anti-virus/malware/etc. 
scanners.

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FE6F2AFD : 88D8 0D23 8D4B 3407 5BD7  66F9 2043 D0E5 FE6F 2AFD}