My 2 cents on this rule:
Using the asterisk can be bad. I've started specifying .{1,211} since Windows allows
file names of
215 characters. Also use a white space expression at the beginning and end to make
sure it's not in
the middle of some binary data. Finally, I setup the rule twice: One with double
quotes and one
without since some mail programs/bot format the messages differently.
Here's what my rules would look like:
H~\sname=".{1,211}\.zip"\s!OR!B~\sname=".{1,211}\.zip"\s
H~\sname=.{1,211}\.zip\s!OR!B~\sname=.{1,211}\.zip\s
Joe Morita
IT Technician
All Media Guide
Phone: 734.887.8169
Fax: 734.827.2492
http://www.allmediaguide.com/
http://www.allmusic.com/
http://www.allmovie.com/
http://www.allgame.com/
http://www.allclassical.com/
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Laura Bhandari
Sent: Friday, April 30, 2004 12:48 PM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] Help understanding a rule - Please!
I can't see why this email got caught by the following rule:
H~name=.*\zip!OR!B~name=.*\zip
The intent of the rule is to block zip attachments. I have them forward to a
different mailbox for review.
I see the reason it gives for being caught - but I don't understand where it
sees it:
Data- zIp5/k/qHXv8Aqv6qrP3mFaCfTcaau
This is the header for the email that got caught by the rule:
------ begin header ----
Received: from NTSERVER.ad.mezrahfinancial.com [64.31.185.70] by
mail.mediacareerlink.com with ESMTP
(SMTPD32-8.05) id AA6DE70110; Thu, 29 Apr 2004 16:49:49 -0400
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----_=_NextPart_001_01C42E2A.A4C75ED0"
Subject: 2004 13 Ugly Men White Party E-vite
X-MimeOLE: Produced By Microsoft Exchange V6.0.4417.0
Date: Thu, 29 Apr 2004 16:43:36 -0400
Message-ID:
<[EMAIL PROTECTED]>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: 2004 13 Ugly Men White Party E-vite
Thread-Index: AcQguxfCbqSwvEYTT2CyVfP70alDSQNa7otwAABPQgA=
X-Priority: 1
Priority: Urgent
Importance: high
From: "Lee Mezrah" <[EMAIL PROTECTED]>
To: "Lee Mezrah" <[EMAIL PROTECTED]>
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: R
X-IMail-Rule: H~name=.*\zip!OR!B~name=.*\zip:[EMAIL PROTECTED]
Data- zIp5/k/qHXv8Aqv6qrP3mFaCfTcaau
X-UIDL: 383189512
----- end header -----
and this is the body of the email (which was in html):
---- begin email ----
othis This is the first of 3 major upcoming 13 Ugly Men events over the next
5 weeks. Hope you can attend & I encourage you to visit our website at
www.13uglymen.com to see what�s next. Your continued support by attending
our events is truly appreciated & makes it possible for us to continue
making large donations to local Tampa charities. Take care
Lee
For complete details visit www.13uglymen.com
---- end email ----
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
