B~(name=".*.vbs"\s|name=".*\.shs"\s|name=".*\.scr"\s|name=".*\.pif"\s|name=" .*\.bat"\s|name=".*\.exe"\s|name=".*\.data"\s|name=".*\.lnk"\s):NUL B~(begin 6=".*.vbs"\s|begin 6=".*\.shs"\s|begin 6=".*\.scr"\s|begin 6=".*\.pif"\s|begin 6=".*\.bat"\s|begin 6=".*\.exe"\s|begin 6=".*\.data"\s|begin 6=".*\.lnk"\s):NUL
This is what I use to try to block most virus attachments (from looking at the KB) HOWEVER~ once I did this (April 22) I stopped getting e-mails from this list! I had to re-subscribe with a different e-mail address I even unblocked .com thinking that maybe this had something to do with it. Anyone know why that may have happened? Also some virus attachments still seem to be getting through. Is it that I am missing the second rule set without the quotes? Or is it the "filename" vs the "name" thing? Any help would be appreciated! Marc -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, May 01, 2002 01:36 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] Rules >Notice the spaces in between the extension's names, I added them so you >can view this message but they are not supposed to be. > >B~filename=(.*\.e xe|.*\.s cr|.*\.v bs|.*\.b at|.*\.s hs|.*\.c om):Filtro >B~begin 6=(.*\.e xe|.*\.s cr|.*\.v bs|.*\.b at|.*\.s hs|.*\.c om):Filtro >B~filename=(".*\.e xe"|".*\.s cr"|".*\.v bs"|".*\.b at"|".*\.s hs"|".*\.c >om"):Filtro >B~begin 6=(".*\.e xe"|".*\.s cr"|".*\.v bs"|".*\.b at"|".*\.s hs"|".*\.c >om"):Filtro Note that this will not catch E-mails when the MIME headers have "name=" instead of "filename=". -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
