B~"=.*\pvbs":null ???
or for us it is
B~"=.*\pvbs":virusbox
which then gets forwarded to who I want for review based on the virusbox.fwd item in
each mailbox. {Note the = sign after the quote.}
____________________________________________________________so your filter would be
B~".*\pvbs":null ???
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of bob mcgregor
Sent: Tuesday, December 05, 2000 7:45 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] rule to block .exe attachments ...
however it misses the file entirely if the attachment phrase does not
include file=. Our older server sends Attachment= "whatever" so the
name=would miss that entirely.
Maybe our older one is the only server that ever sent files this way but I
doubt it. I think the only way to catch them is to look for the filename
only and not include the name= at all...
bob
____________________________________________________________No, because the
first string contains the second one. The rule
B~name=".*\pvbs":NUL
will catch both filename="test.vbs" and name="test.vbs".
Note that this mail would be filtered by the rule above.
Marius
-----Original Message-----
From: Jacques Brouwers [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 04, 2000 7:03 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] rule to block .exe attachments ...
Should we use both to make sure to catch all of them?
B~name=".*\pvbs":NUL
AND
B~filename=".*\pvbs":NUL
Jacques
[snip]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/