best way to do this with the least amount of false positives would be something like this:
 
B~Content-Type\:\sapplication/octet-stream!AND!B~name=.{1,64}\.com:<whatever action to take>
 
There are still probabilities of false positives AND ones that get through which aren't as high as yours but still there. Personally I really don't worry about blocking com extensions as I haven't seen one in years but that's my level of paranoia I also sleep better by utilizing an email virus scanner made for server level scanning of email (of course I use the one available from us)
 
hope this helps
Eric S

----- Original Message -----
Sent: Saturday, December 25, 2004 3:30 AM
Subject: RE: [IMail Forum] rule for blocking .com attachment

Hi,

 

Sorry, the content went off by mistake

 

I got this from ipswitch forum. Will this rule block any normal mail without .com attachment??

 

Thanks & Regards,
 
Yatin Shah

Business Development Executive
QualiSpace, A QuantumPages Enterprise
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Tel No.  +91 (22) 5592 1480
Fax No. +91 (22) 5592 1484

Mobile: +91 9323182676
Email:
[EMAIL PROTECTED]
URL: http://www.qualispace.com
Support URL: http://my.qualispace.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent:
Saturday, December 25, 2004 1:47 PM
To: [email protected]
Subject: RE: [IMail Forum] rule for blocking .com attachment

 

Is that just a statement, or is there a question involved?

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yatin @ QualiSpace Sales
Sent: Saturday, December 25, 2004 12:01 AM
To: [email protected]
Subject: [IMail Forum] rule for blocking .com attachment

 

Hello,

 

            I have set a rule for blocking the .com attachment. The rule is

 

B~name=.{1,65}\.com!OR!B~begin 6.{1,64}\.com:NUL

 

Thanks & Regards,
 
Yatin Shah

Business Development Executive
QualiSpace, A QuantumPages Enterprise
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Tel No.  +91 (22) 5592 1480
Fax No. +91 (22) 5592 1484

Mobile: +91 9323182676
Email:
[EMAIL PROTECTED]
URL: http://www.qualispace.com
Support URL: http://my.qualispace.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Reply via email to