On Wed, 30 Jan 2002 15:11:32 EST, Amy Stinson <[log in to unmask]>  said:
> I have my lists set to no attachments.  MYPARTY slipped through.  How did that
> happen and how can I stop it?--

It happened because MYPARTY leveraged a bogosity in Outlook, where it
assumes that any line that starts with 'begin  ' is the start of an old
file transfer protocol called 'uuencode' that was popular before MIME and
base-64 encoding.  The only software that thinks it's an attachment is Outlook.

Go figure. ;)

How to stop it?

1) Shoot all your Outlook users - they're easy to identify because they
send everybody mail every few weeks.

2) Use a virus-scanning front-end for your mail systems (probably an option
only if you're a fairly large site).  We've been mostly happy with our
Mirapoint systems, except for their tendency to degrade rather ungracefully
under *really* high load.  I think Mirapoint didn't believe us when we
told them that "yes, we really *DO* often have over 1,000 simultaneous
inbound SMTP connections".

                                Valdis Kletnieks
                                Computer Systems Senior Engineer
                                Virginia Tech