On Mon, 2002-02-04 at 09:16, Bill Michell wrote:
> > I use the following in my .mailfilter file: 
> > 
> > # Quarantine
> > if( ! /From:.*mydomain.com.au/)
> >   if(/.*name=.*\.exe\"/:b \
> >   || /.*name=.*\.vbs\"/:b \
> >   || /.*name=.*\.bat\"/:b \
> >   || /.*name=.*\.com\"/:b \
> >   || /.*name=.*\.scr\"/:b \
> >   || /.*name=.*\.pif\"/:b )
> >   {
> >   to "Maildir/.Quarantine"
> >   } 
...
> > I do not recommend you do this on a busy server, it can load the server.
> > Ian 
> > 
> I suspect it would load a busy server much less if you did one search for a 
> more complicated pattern rather than many searches for a simple pattern, as 
> you have done...

Yeah, I'd be interested in knowing if the load incurred by the above
processing were lessened by a filter like this:
# Quarantine
if( ! /From:.*mydomain.com.au/)
 if(/.*name=.*\.(exe|vbs|bat|com|scr|pif)\"/:b )
   {
   to "Maildir/.Quarantine"
   } 

Perhaps Ian could try it out and let us know how much difference there
is?

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to