> Hi, who have an optimized rule that block sircam.exe and your
> variants?
These RegEx are working in IMGate (I wonder if Ipswitch�s AV will catch it?):
/H-o-l-a c-o-m-o e-s-t-a-s/ REJECT
/N-o-s v-e-m-o-s p-r-o-nt-o/ REJECT
/H-i\! H-o-w a-r-e y-o-u/ REJECT
/S-e-e y-o-u l-a-t-er\. T-h-a-n-k-s/ REJECT
You don�t have IMGate? :))))
Len
http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
