what about: /^\s+name[***REMOVE = THIS***]=3D[a-zA-Z0-9+\-_]*\.((exe|ex_|eml|scr|pif|bat|shs|shb|vxd|rm|chm= |vbs|ini|cmd|hta|reg|lnk|js|jse))/ REJECT
Although i think some attachments have spaces this might allow you to = put com/net in. Wow i had a hard time sending this too the list had to snip the text = from before.
