Regarding NAI Webshield; Webshield Solaris, e250 and e500 all reassemble the messages and correctly scan them. Webshield SMTP (ie for NT/2000) does not follow the RFC, and the messages are blindly passed on, bypassing content filters, virus checking etc. -----Original Message----- From: Aviram Jenik [mailto:aviram@beyondsecurity.com] Sent: 12 September 2002 14:45 To: bugtraq@securityfocus.com Subject: Bypassing SMTP Content Protection with a Flick of a Button Bypassing SMTP Content Protection with a Flick of a Button ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/securitynews/5YP0A0K8CM.html <snip>