On 01:43 PM 05/19/2000 -0600, it would appear that Dan Spangenberg wrote:
>OK I think I have figured out at least a portion of this puzzle. I spent
>over an hour on the phone with a very knowledgeable Imail technician this
>morning. We did many test emails, he sent me emails with a .v$b$s file
>attached. This is rule I was using:
>
>B~filename=".*\.v$b$s":filtered (actual rule has "$" removed)
>
>This rule would catch his emails, but it would not catch emails that I sent,
>(routed to an SMTP server outside my domain). This was very puzzling to us.
>Upon examining the actual raw header text of the emails, we found that they
>were different. He was sending his emails from outlook express and I from
>Outlook 2000. I'm not sure what these two programs do different to emails
>and attachments, but something.
>
>We then modified the rule to look at the header, instead of the body, and lo
>and behold it caught emails from either program!
>
>New rule: H~filename=".*\.v$b$s":filtered (actual rule has "$"
>removed)
Just tried the H~ rule described above and it also fails to catch
testbed.zip.v$b$s. This file was sent using Eudora 4.3 registered version
to my server and then back to me. Enabling my B~\pv b s:virus rule (sans
spaces) and placing it after the H~ rule (just to make sure it isn't
malformed and possibly causing a break in the rule check) the server caught
it immediately.
Tyran Ormond
LAN Technician/Programmer
[EMAIL PROTECTED]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
