[sanesecurity] Re: false positive: Sanesecurity.Junk.27742

  • From: Leen Besselink <leen@xxxxxxxxxxxxxxxxx>
  • To: sanesecurity@xxxxxxxxxxxxx
  • Date: Fri, 19 Nov 2010 18:48:30 +0100

On Fri, Nov 19, 2010 at 12:26:45PM +0000, Tony Finch wrote:
> One of our users reported a problem with Sanesecurity.Junk.27742
> The pattern is just a 6 character alphanumeric string! It matched
> the base64 encoding of an attachment.
> 

Hi,

Not sure when you had this problem (my reply is a bit late), but I checked all 
the mirrors, they all had the exact same file (says rsync).

It's size is: 4744277 bytes (says wc) and the entry is:

Sanesecurity.Junk.27742:4:*:706834726d61

We haven't received any other file from any mirror which had something else, as 
far as I can see.

Just so you know, what others have seen.

I've not seen that entry change all day.

> Tony.

Hope it helps.

Have a nice weekend,
Leen.

> -- 
> f.anthony.n.finch  <dot@xxxxxxxx>  http://dotat.at/
> HUMBER THAMES DOVER WIGHT PORTLAND: NORTH BACKING WEST OR NORTHWEST, 5 TO 7,
> DECREASING 4 OR 5, OCCASIONALLY 6 LATER IN HUMBER AND THAMES. MODERATE OR
> ROUGH. RAIN THEN FAIR. GOOD.
> 

Other related posts: