[pmmail-list] SirCam Filter Failure Alert

[Kris Sorem Sr]

My reply to message from Maynard sent on
Thu, 23 Aug 2001 07:17:08 -0500 (CDT). You wrote:

>I just had a SirCam message pass the filter.

This is unique to this particular message.

>
>The filter condition which the message evaded is/was
>&attachment.name="$header.subject$"

The filter processed correctly. Subject _does not_ equal attachment name.
The reason for this is not the worm or a problem with the filter.

>
>>From the message file:
>Received: from mailsrv.otenet.gr (mailsrv.otenet.gr [195.170.0.5]) 
>Subject: =?ISO-8859-7?Q?=C1=C9=D4=C9=CF=CB=CF=C3=C9=CA=C7=20=C5=CA=C8=C5=D3=C7=20=C1=C3=CF=D1=C1=D3=D4=CF=D5?=                                                  
>date: Thu, 23 Aug 2001 11:01:51 +0300                                           
>MIME-Version: 1.0                                                               
>X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400                        
>X-Mailer: Microsoft Outlook Express 5.50.4133.2400                              
>Content-Type: multipart/mixed; Boundary="----095E77BE_Outlook_Express_message_boundary"                                                                         
>Content-Disposition: Multipart message                                          
>
>------095E77BE_Outlook_Express_message_boundary                                 
>Content-Type: application/mixed; name="ÁÉ É Ë ÃÉÊ  ÅÊÈÅ   ÁÃ  Á    .doc.pif"    
>Content-Transfer-Encoding: base64                                               
>Content-Disposition: attachment;  filename="ÁÉ É Ë ÃÉÊ  ÅÊÈÅ   ÁÃ  Á    .doc.pif"                                                                               

This message has a character set that was not correctly translated. The
result is unintelligible characters. Due to this translation failure, the
filter processed the non-equal characters and passed the message. If this
is consistent for you, you may wish to filter for this character set. As
always, it is best to manually check an attachment before opening it.
--
JMO, 
/s/~Kris
-------------------------------+------------------------------------------