train on viruses? multipart/mixed

[Chris Fortune]

Microsoft Outlook and Outlook Express uses a multipart/mixed header when attaching *any* document, including plain text.  This is a
very common practice, and I don't think it is wise to arbitrarily block it on the grounds that viruses use the same RFC header.


> >I can see that removing multipart/mixed messages would reduce your viruses,
> >but it would also remove an awful lot of innocent mail.  I did a quick
> >search through my own email corpus and found 583 good emails with
> >multipart/mixed in the head section.
>
> I did the same search before trying this of course, and in about twenty
> thousand saved messages I found precisely three multipart/mixeds.
> None of those three was particularly important, and if the sender
> really wanted to get through they could have simply re-sent the
> message as plain text, like the bounce message says.
>
> I really do think multipart/mixed ought to be deprecated net-wide.
>
> ---------------------------------------------------------------------
> FAQ: http://bogofilter.sourceforge.net/bogofilter-faq.html
> To unsubscribe, e-mail: bogofilter-unsubscribe at aotto.com
> For summary digest subscription: bogofilter-digest-subscribe at aotto.com
> For more commands, e-mail: bogofilter-help at aotto.com
>
>