Anthony,
Have you looked at the message itself with Notepad? If not, move
the forwarded message to a new mailbox (so it is easier to examine
the message's text-stream). Use Windows Explorer & Notepad to open
the file. Then you can view the text string that identifies the
attachment's name and use that string to write your rule.
That's how I discovered that the rule works better without the
quotes. There were a few situations that did NOT have quotes, so
the more popular form of the rule would let those through. I also
found three situations where "filename" was not used, but "name"
was... hence the modification of the rule that I suggested below.
Gordon
----
Anthony Abby wrote:
>
> Gordon:
>
> That didn't work either. It caught the "virgin" copy of the email, but not
> the forward, with the .doc attachement.
>
> Anthony
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Gordon Williams
> > Sent: Sunday, October 08, 2000 12:38 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [IMail Forum] RULES HELP
> >
> >
> >
> > Anthony,
> >
> > Try this rule, on both a virgin message with attachment and a
> > forward of that message:
> >
> > B~name=.*\.dox:NUL
> >
> > So that rules don't catch this message, note that the "x" in dox
> > should be changed to a "c" when you implement the rule.
> >
> > I've found that constructing rules as above (to trap file
> > extensions) results in the highest number of hits -- much more
> > effective than the more "popular" method that you are using:
> >
> > > B~filename=".*\.dox":NUL
> >
> > (same substitution of "c" required for the "x").
> >
> > Let me know whether this takes care of your situation.
> >
> > Gordon Williams
> > Michigan State University
> >
> > -----
> > Anthony Abby wrote:
> > >
> > > How come these following rules don't work??? I sent these
> > rules up, along
> > > with others to filter out .vbs and other known virus types on my mailing
> > > lists. I have a seperate rules.ima file with these rules in
> > it, in a test
> > > mailing list. I sent a .doc attachment to the list and it got through.
> > > Why???
> > >
> > > B~filename=".*\.ppt":NUL
> > > B~filename=".*\.gif":NUL
> > > B~filename=".*\.jpg":NUL
> > > B~filename=".*\.doc":NUL
> > > B~filename=".*\.txt":NUL
> > > B~filename=".*\.pdf":NUL
> > >
> > > Anthony
> > >
> > > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > > to be removed from this list.
> > >
> > > An Archive of this list is available at:
> > > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> > Please visit http://www.ipswitch.com/support/mailing-lists.html
> > to be removed from this list.
> >
> > An Archive of this list is available at:
> > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/