The only problem I see with this is it won't catch attachments that are
described as "filename=xxxxx<dot>zip" due to the white space requirement
before the "n" in name
Eric S
----- Original Message -----
From: "Joe Morita" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, May 03, 2004 8:25 AM
Subject: RE: [IMail Forum] Help understanding a rule - Please!
> My 2 cents on this rule:
> Using the asterisk can be bad. I've started specifying .{1,211} since
Windows allows file names of
> 215 characters. Also use a white space expression at the beginning and end
to make sure it's not in
> the middle of some binary data. Finally, I setup the rule twice: One with
double quotes and one
> without since some mail programs/bot format the messages differently.
> Here's what my rules would look like:
>
> H~\sname=".{1,211}\.zip"\s!OR!B~\sname=".{1,211}\.zip"\s
> H~\sname=.{1,211}\.zip\s!OR!B~\sname=.{1,211}\.zip\s
>
> Joe Morita
> IT Technician
> All Media Guide
> Phone: 734.887.8169
> Fax: 734.827.2492
> http://www.allmediaguide.com/
> http://www.allmusic.com/
> http://www.allmovie.com/
> http://www.allgame.com/
> http://www.allclassical.com/
>
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Laura Bhandari
> Sent: Friday, April 30, 2004 12:48 PM
> To: [EMAIL PROTECTED]
> Subject: [IMail Forum] Help understanding a rule - Please!
>
>
>
> I can't see why this email got caught by the following rule:
> H~name=.*\zip!OR!B~name=.*\zip
>
> The intent of the rule is to block zip attachments. I have them forward to
a
> different mailbox for review.
>
> I see the reason it gives for being caught - but I don't understand where
it
> sees it:
> Data- zIp5/k/qHXv8Aqv6qrP3mFaCfTcaau
>
>
> This is the header for the email that got caught by the rule:
>
> ------ begin header ----
>
> Received: from NTSERVER.ad.mezrahfinancial.com [64.31.185.70] by
> mail.mediacareerlink.com with ESMTP
> (SMTPD32-8.05) id AA6DE70110; Thu, 29 Apr 2004 16:49:49 -0400
> content-class: urn:content-classes:message
> MIME-Version: 1.0
> Content-Type: multipart/related;
> type="multipart/alternative";
> boundary="----_=_NextPart_001_01C42E2A.A4C75ED0"
> Subject: 2004 13 Ugly Men White Party E-vite
> X-MimeOLE: Produced By Microsoft Exchange V6.0.4417.0
> Date: Thu, 29 Apr 2004 16:43:36 -0400
> Message-ID:
> <[EMAIL PROTECTED]>
> X-MS-Has-Attach:
> X-MS-TNEF-Correlator:
> Thread-Topic: 2004 13 Ugly Men White Party E-vite
> Thread-Index: AcQguxfCbqSwvEYTT2CyVfP70alDSQNa7otwAABPQgA=
> X-Priority: 1
> Priority: Urgent
> Importance: high
> From: "Lee Mezrah" <[EMAIL PROTECTED]>
> To: "Lee Mezrah" <[EMAIL PROTECTED]>
> X-RCPT-TO: <[EMAIL PROTECTED]>
> Status: R
> X-IMail-Rule: H~name=.*\zip!OR!B~name=.*\zip:[EMAIL PROTECTED]
> Data- zIp5/k/qHXv8Aqv6qrP3mFaCfTcaau
> X-UIDL: 383189512
>
> ----- end header -----
>
> and this is the body of the email (which was in html):
>
> ---- begin email ----
> othis This is the first of 3 major upcoming 13 Ugly Men events over the
next
> 5 weeks. Hope you can attend & I encourage you to visit our website at
> www.13uglymen.com to see what's next. Your continued support by attending
> our events is truly appreciated & makes it possible for us to continue
> making large donations to local Tampa charities. Take care
>
>
> Lee
>
> For complete details visit www.13uglymen.com
> ---- end email ----
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
