Meaning of ".asc" in BANNED messages

@lbutlr kremels at kreme.com
Wed Mar 9 00:36:11 CET 2016


On Mar 8, 2016, at 11:21 AM, Tom Hendrikx <tom at whyscream.net> wrote:
> On 08-03-16 19:15, @lbutlr wrote:
>> On Mar 8, 2016, at 10:31 AM, Tom Hendrikx <tom at whyscream.net> wrote:
>>> On 08-03-16 16:58, @lbutlr wrote:
>>>> What is “.asc” since that is not a banned attachment.
>>> 
>>> A pgp signature, this message has one
>> 
>> There is no way that every one of these javascript-containing
>> messages has a pgp signature.
>> 
> 
> It's probably an evil javascript simply trying to mask as a pgp sig.

No. *EVERY* message that hits BANNED has the same pattern,

.asc,<something>.js

100%. No exceptions.

Considering I can count on one hand with not all the fingers the number of spam messages I’ve ever seen with faked PGP sig, this is something else.

-- 
CURSIVE WRITING DOES NOT MEAN WHAT I THINK IT DOES Bart chalkboard Ep.
2F11



More information about the amavis-users mailing list