If I remember correctly on 11/22/02 7:49 AM Serhan Sevim wrote: > Guys, I'm in a loss to filter some malicious extensioned files,such like, > vbs,scr,exe, etc.. > I'm trying to setup the filter and put it into ima.rules file, but either it > is filtering all the attahcments or none. > Can somebody post his/her ima.rules file which filters these malicious > attachments. ? > Thanks in advance.
Sheran, This is the extent of my rule file and it is working well. We also do similar filtering of extensions using Declude, so we have a bit of redundancy built in. H~name=.*\.(exe|scr|vbs|com):NUL B~name=.*\.(exe|scr|vbs|com):NUL H~begin 6.*\.(exe|scr|vbs|com):NUL B~begin 6=.*\.(exe|scr|vbs|com):NUL H~name=.*\.(gen|lnk|pif|bat):NUL B~name=.*\.(gen|lnk|pif|bat):NUL H~begin 6.*\.(gen|lnk|pif|bat):NUL B~friend-greeting.com!OR!B~Frined-Greetings.com:NUL Regards, -Don "Let us go forth awhile, and get better air in our lungs. Let us leave our closed rooms... The game of ball is glorious." - Walt Whitman =================================== Don Wolff- Technology Coordinator Phoenix-Talent School District #4 mailto:[EMAIL PROTECTED] Office- 541-535-0200 Mobile- 541-621-4717 FAX- 541-535-7552 --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
