Amusing: Simple word filtering SNAFU, emphasis on the F

Got this  back from a downstream mail/spam admin for our
CanIt instalation 
who was troubleshooting why it wasn't getting delivered:

Feb 27 2007 12:46:09 mdf2 postfix/cleanup[371]: 6B9EE60044:
discard: body 
aW5kaXZpZHVhbGl6ZWQgZWR1Y2F0aW9uIHByb2dyYW0gKElFUCkgdGhhdCBp
bmNsdWRlcyBhdmVy 
from servername; from=<userdomain> to=<recipotherdomain> proto=SMTP 
helo=<servername> 

What are the odds that a base64 encoding would include the
F-bomb?

Is "Scunthorped" a word? ( http:
//en.wikipedia.org/wiki/Scunthorpe_Problem 
)

---
The Vista Content Protection specification could very well
constitute the 
longest suicide note in history  -- Peter Gutmann 
http://www.cs.auckland.ac.nz/~pgut001/pubs/vista_cost.
html

William Brown
Web Development & Messaging Services
Technology Services, WNYRIC, Erie 1 BOCES
(716)821-7285

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in
the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpengu
in.com
MIMEDefang mailing list MIMEDefanglists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mime
defang

On Wed, 2007-02-28 at 09:59 -0500, WBrowne1b.org
wrote:
> Got this  back from a downstream mail/spam admin for
our CanIt instalation 
> who was troubleshooting why it wasn't getting
delivered:
> 
> Feb 27 2007 12:46:09 mdf2 postfix/cleanup[371]:
6B9EE60044: discard: body 
>
aW5kaXZpZHVhbGl6ZWQgZWR1Y2F0aW9uIHByb2dyYW0gKElFUCkgdGhhdCBp
bmNsdWRlcyBhdmVy 
> from servername; from=<userdomain> to=<recipotherdomain> proto=SMTP 
> helo=<servername> 
> 
> What are the odds that a base64 encoding would include
the F-bomb?

Pretty high. We had a user who filtered on "sex"
and some four letter
words, and they were having (their words) "any message
with an
attachment" blocked. I figured out the actual
probabilities then, but
I've forgotten them now.

Richard


_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in
the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpengu
in.com
MIMEDefang mailing list MIMEDefanglists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mime
defang