Would you just type this rule in the SMTP security?



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of bob mcgregor
Sent: Tuesday, December 05, 2000 1:15 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [IMail Forum] rule to block .exe attachments ...


I totally agree however if the rule does not catch the attachment what's
worse?

how about this?
 B~"=.*\pvbs":NUL


just add the = so at least there has to be =filename.ext
bob
____________________________________________________________Well, the syntax
of how attachments are marked depends on the type of mail
encoding (mime, base64, uuencode, binhex...). Some use filename=, some use
name=, and you found out that there is attachment= as well. Thank you for
contributing this knowledge.

To make sure, somebody had to find out (by studying RFC's or by trying every
type of encoding) the other possible syntaxes. I don't have the time.

The rule which you propose

 B~".*\pvbs":NUL

would trash every mail containing the text .vbs instead of deleting only the
mails with attachments ending in .vbs. I think this would be infeasible.

Any other suggestions?

Marius

-----Original Message-----
From: bob mcgregor [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, December 05, 2000 3:45 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] rule to block .exe attachments ...


however it misses the file entirely if the attachment phrase does not
include file=.  Our older server sends Attachment= "whatever" so the
name=would miss that entirely.

Maybe our older one is the only server that ever sent files this way but I
doubt it.  I think the only way to catch them is to look for the filename
only and not include the name= at all...

bob
[snip]


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to