RE: [Declude.Virus] Spam .com files being blocked.

[Chris Fitch]

Are they all coming from the same domain or mail server?  If the mail server I would block the IP at the router or firewall.  Another option would be to deny SMTP from the domain   Chris Fitch Sr Network Administrator Industrial Chemicals Inc. [EMAIL PROTECTED] 205-823-7330 Ext. 1039 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, March 16, 2005 10:19 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Spam .com files being blocked.   And a quick follow-up about this.  It appears that it is a spammer that is causing the hit.  Here's a sample of a MIME boundary that Declude is detecting as an invalid COM file: ------=_NextPart_000_00QP_00N2764VQ_00Y.154D01N0 Content-Type: image/gif;         name="[EMAIL PROTECTED]" Content-Transfer-Encoding: base64 Content-ID: <[EMAIL PROTECTED]> Still though, this should get quietly blocked without a bounce because Declude detected the file as being a bogus COM file, just like it does/did with bogus ZIP, JPG and other files, and not use the banned extension bouncing when such a condition is detected. Matt Darin Cox wrote: Yep. I just added SKIPIFEXT COM to my bannotify.eml yesterday. Darin.     ----- Original Message ----- From: Scott Fisher To: Declude.Virus@declude.com Sent: Tuesday, March 15, 2005 3:31 PM Subject: [Declude.Virus] Spam .com files being blocked.   I block .com files.   The last 3 days, I've been getting consistent blocking of spam messages referring to a gif file named .com: Content-Type: image/gif;         name="wdjgamexmail.com"   These are getting blocked, but the users are getting a little tired of the bannotify.eml messages that this triggers. So I'm reluctantly forced to add SKIPIFEXT COM to my bannotify.eml file.   Has anyone else been seeing this? -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================