I have attached Ipswitch Knowledgebase document number IM-19990609-DM06.  I am trying to keep all .vbs and js files from being delivered to my users.  I implemented this rule into my rules.ima file under the Imail directory.  I am using IMail 6.06.  At first, it seemed to work fine until I realized ALL messages with attachments of any kind were being delivered to NUL.  This was obviously not the desired result.  Can anybody offer any help?  It's definitely not a syntax error as I copied and pasted the text into the rules.ima file.
 
Thanks,
Scot A. Rager
Network Manager
Earth Sciences Consultants, Inc.
 
Title: IMail - Rule that will delete junk messages without routing them to a mailbox
Please choose 1 to 5 whether this article solves your problem.
1 No Help at all 5 Problem Solved
Please provide any comments that would make this article more useful:
Return to Knowledge Base Search Page

 

IMail - Rule that will delete junk messages without routing them to a mailbox

Product: Version: Platform:
IMail 5.0+ NT,Win2000

Question/Problem: How can I set up a rule that will simply delete any specified junk messages without routing them to a mailbox?

Answer/Solution: Put rules in your rules.ima like this:

F~filtered from address:NUL
B~filtered body content:NUL

And so on...

As .vbs and script viruses are turning up, a customer suggests these rules:

B~(name=".*\.vbs"|name=".*\.shs"|name=".*\.scr"):NUL
B~(begin 6.*\.vbs|begin 6.*\.shs|begin 6.*\.scr):NUL

For IMail versions before 6.04 use: B~(name=".*\pvbs"|name=".*\pshs"|name=".*\pscr"):NUL
B~(begin 6.*\pvbs|begin 6.*\pshs|begin 6.*\pscr):NUL

The first rule filters MIME attachments, characterized by the string 
name="filename.ext"
while the second rule filters Uuencoded attachments, characterized by the string Begin 6

Note that this will delete all incoming messages containing attached files with .vbs .shs and .scr extensions. You can replace NUL with a name, such as spambox, to direct filtered messages to a sub-mailbox, (spambox.mbx) in the user's folder.

Note that only the first 32K of a message is checked. Please refer to page 78 in the IMail 6 User's Guide under Limits.

It is necessary to stop and restart the SMTP service after modifications to
rules.ima to activate the new filter settings.

Document #: Revision Date:
IM-19990609-DM06 03/07/01

Return To KnowledgeBase Search Page

Reply via email to