These are the rules for "attachments" that I use and I can't remember the last time I had a false positive.

B~name=.{1,30}\.(bat|chm|cmd|cpl|exe|ex_|hta|lnk|shs|scr|sc_|theme|pif|vbs|job):[EMAIL PROTECTED]


At 03:16 AM 12/25/2004, you wrote:
best way to do this with the least amount of false positives would be something like this:
 
B~Content-Type\:\sapplication/octet-stream!AND!B~name=.{1,64}\.com:<whatever action to take>
 
There are still probabilities of false positives AND ones that get through which aren't as high as yours but still there. Personally I really don't worry about blocking com extensions as I haven't seen one in years but that's my level of paranoia I also sleep better by utilizing an email virus scanner made for server level scanning of email (of course I use the one available from us)
 
hope this helps
Eric S

----- Original Message -----
From: Yatin @ QualiSpace Sales
To: [email protected]
Sent: Saturday, December 25, 2004 3:30 AM
Subject: RE: [IMail Forum] rule for blocking .com attachment

Hi,

 

Sorry, the content went off by mistake

 

I got this from ipswitch forum. Will this rule block any normal mail without .com attachment??

 

Thanks & Regards,
 
Yatin Shah

Business Development Executive
QualiSpace, A QuantumPages Enterprise
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Tel No.  +91 (22) 5592 1480
Fax No. +91 (22) 5592 1484

Mobile: +91 9323182676
Email: [EMAIL PROTECTED]
URL: http://www.qualispace.com
Support URL: http://my.qualispace.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

-----Original Message-----
From: [EMAIL PROTECTED] [ mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff (Lists)
Sent: Saturday, December 25, 2004 1:47 PM
To: [email protected]
Subject: RE: [IMail Forum] rule for blocking .com attachment

 

Is that just a statement, or is there a question involved?

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: [EMAIL PROTECTED] [ mailto:[EMAIL PROTECTED]] On Behalf Of Yatin @ QualiSpace Sales
Sent: Saturday, December 25, 2004 12:01 AM
To: [email protected]
Subject: [IMail Forum] rule for blocking .com attachment

 

Hello,

 

            I have set a rule for blocking the .com attachment. The rule is

 

B~name=.{1,65}\.com!OR!B~begin 6.{1,64}\.com:NUL

 

Thanks & Regards,
 
Yatin Shah

Business Development Executive
QualiSpace, A QuantumPages Enterprise
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Tel No.  +91 (22) 5592 1480
Fax No. +91 (22) 5592 1484

Mobile: +91 9323182676
Email: [EMAIL PROTECTED]
URL: http://www.qualispace.com
Support URL: http://my.qualispace.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to