I put the following header check in about an hour ago (all one line): /^Content-(Type|Disposition):.*(file)?name *= *.*your\_details\.zip(\")?$/ REJECT Email rejected, Sobig virus detected
Already blocked six sobig emails. Not sure if this is the best regexp to get them but it seems to work. -- Chris Scott Host Orlando, Inc. http://www.hostorlando.com/
