Anyone have a good rule to filter for ".com" attachments? Obviously, a ".com" file is an executable which could do damage. But when you use that extension in the typical rule, (B~name=".*\.vb!s"\s|name=".*\.com"\s)...etc. you get MANY false positives.
We are using the suggested rule to catch ".vbs" ".scr" ".pif", etc. And IMail is doing a terrific job of forwarding those files to a Virus checking mailbox for further review. It's a great "second" line of defense, as we are also scanning for viruses at the server. A great example is the latest virus today... the "gone.scr". The virus definitions didn't know about it yet, but the rule caught it anyway. Now I'd like to do the same thing with ".com" files. Thanks! Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
