Is there a way to block an IP address before analysis by Declude's AV (Ver 1.82 - Imail 8.x)?

I thought I should be able to do this with rules.ima by looking for a line in the header. So I have a line that says
   H~xxx\.yyy\.zz\.
but it doesn't work. (In case you can't see it, the lines read \. = slash dot per Ipswitch docs) I don't think the H~ (header contains) command reads everything in the header.

~Joe


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to