>You want a rule that looks in the header
>
>and contains
>
>\pvbs
>
>the action move to delete (or a quarantine folder)
Actually, that won't catch any E-mail with the vbs extension. That's
because the name of the attachment appears in the MIME headers, which are
usually not in the E-mail headers, and the IMail rules look at the E-mail
headers. So you would need to search both the headers and the body. But,
you can't search for just \pvbs, or you'll get a lot of false
positives. Searching the archives should show a number of examples to
catch various types of files (depending on how they are encoded and such).
Of course, the easiest and most reliable way of detecting the file
extensions (although the most expensive way, too) is to use our Declude
Virus, which lets you ban files based on the extension. You can even have
an E-mail go back to the sender letting them know that the file was banned,
so there isn't anyone spending hours trying to figure out what went wrong
when E-mail was just disappearing.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
