One thing I just thought of. Is it necessary to stop and restart any of the
services after manually editing the rules.ima file?
I am just editing it with a text editor.
Dan
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Gordon Williams
Sent: Monday, May 08, 2000 1:49 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] filtering for .vbs attachments
For the heck of it, place this rule first in rules.ima (or move it
to top spot if using IMail Admin). At least for testing purposes,
this will assure that the VBS rule gets first crack at the incoming
message.
Check the results in TRAPPED's VIRUS box (or whatever you are using)
by logging in via IMAP4 or web messaging. If using POP3, be sure
you are logging in as [EMAIL PROTECTED] (caps just for
emphasis here). Remember, the filtered messages will NOT be in
TRAPPED's "main" mailbox... they will be in TRAPPED's "virus"
mailbox (or whatever you put after the colon in your rule).
Other than these last two messages, I'm pretty much out of
hypotheses.
Gordon
-----
George Thompson wrote:
>
> I have tried this myself and I can't get it to work either.
>
> ----- Original Message -----
> From: "Dan Spangenberg" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, May 08, 2000 2:49 PM
> Subject: RE: [IMail Forum] filtering for .vbs attachments
>
> > OK, this is getting to be a pain now. I have tried the rules file both
> ways
> > now and it still won't catch a .vbs attachment.
> >
> > B~attachment; filename=".*\.vbs":virus
> > B~filename=".*\.vbs":virus
> >
> > I am doing it EXACTLY like Gordon is doing it, with a .fwd file in each
> > users folder etc.
> > What other variables may be affecting it?
> >
> >
> > Any ideas?
> >
> > Dan
> >
> >
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Gerry Dalton
> > Sent: Monday, May 08, 2000 6:28 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [IMail Forum] filtering for .vbs attachments
> >
> >
> > After talking with TechSupport this morning I changed my rules to the
> > following:
> >
> > B~attachment; filename=".*\.vbs":filtered_stuff
> > B~attachment; filename="funny.htm":filtered_stuff
> >
> > Seems to work fine if it comes in via SMTP, not if you use the Imail
> Client
> > and POP !
> >
> > I'm using IMFilter to spread rules out to all users....works great !
> >
> > I suggested to IMAIL tech support that they implement the following rule
> > additons:
> >
> > A~ Attachments
> > /x Extension
> >
> > Gerry
> >
> >
> > At 12:12 PM 5/8/00 -0400, you wrote:
> > >I tested the rule and it started catching all attachments... so I had
to
> > >take it out.
> > >_Pete
> > >
> > >
> > > > At 03:29 PM 5/5/2000 +0200, you wrote:
> > > > >As variants of other .vbs viruses are turning up, I use a filter
like
> > > > >
> > > > >B~filename=".*\.vbs":NUL
> > > > >
> >
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
