Sure.  You could create a Declude combo filter like that.  Put a size test 
before the custom filter in your global.cfg, add the tests the message fails 
to incoming message headers, and in the custom combo filter look for the 
size test failure warning in the headers, and look for the zip file in the 
body, failing the combo test only if both conditions hit.

Darin.


----- Original Message ----- 
From: "Todd Richards" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, August 02, 2007 2:24 PM
Subject: [Declude.JunkMail] Zip files


Hi Everyone -

It's hit and miss, but today I received several of the small zip files.  A
quick glance and they were either txt files or .exe files.  All were between
5-25K in size.

How is everyone else handling these?  I was almost wondering if there is a
way to say (in general terms) "IF file = zip, then -5, and if size < 30K,
then minus 10".  Some way to deduct for the small zip file if that makes
sense.

Anyway, if anyone has any suggestions, I'm all ears!

Todd



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to