[Full-disclosure] blocking GIF, PNG and JPG with MIME

["lsi" <stuart@xxxxxxxxxxxxxx>]

MIME GIF sig:

R0lGODlh

MIME PNG sig:

iVBORw0KGgoAAAAN

MIME JPG sig:

/9j/4AAQSkZJRgABAQ

How to use:

Check the BODY of the message for the strings above.  A match 
indicates the message has an image attached, which u can then block 
if desired.

More:

http://seclists.org/fulldisclosure/2004/Dec/0526.html

Stu

---
Stuart Udall
stuart at@xxxxxxxxxxxxxx net - http://www.cyberdelix.net/

--- 
 * Origin: lsi: revolution through evolution (192:168/0.2)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/