Len Conrad wrote: > >>I've seen that mentioned a few times. In the two Swen mails I received, I >>didn't see that string. Not sure why, though--encoding? > > > I confirm the sven sails right through that body check
Glad to know it's not just me... > > >>I have had two rejects so far on my regexp above. >> >>Also, it looks like they use to following (at BOL but I've indented to >>hopefully prevent rejections in case anyone if filtering this): >> Content-type: application/x-msdownload; name=[filename] >> >>where [filename] is the name of the attachment so you could probably also >>block on 'Content-type: application/x-msdownload; name=Qdfkx.exe' in a body >>filter. > > > why a specific filename? Bad copy/paste/edit operation. Wetware error ;-) I meant to have: Content-type: application/x-msdownload; > > I've confirmed that this in header or body checks doesn't stop it. > > /^Content\-type\: application\/x\-msdownload\;.*\.exe/ REJECT sven > I think it is due to that line being near the end of the body of the message and not in the headers at all. Although I would think if your mime_header_checks = $header_checks then it would get it but I'm not at all clear on the mime checks processing. -- Chris Scott Host Orlando, Inc http://www.hostorlando.com/
