(Gee- my body_checks and the list server have no problem the string - munged the AA's in the signature!) Per posts here and on the Postfix list, I'm trying to filter these viral zip files with the following in my body_checks.regexp: # New Virus- Zip attachment /^UEsDBAoAA**AA/ HOLD Virus attachment detected (novarg.zip)
To test with postmap I'm doing the following: mail# postmap -q 'UEsDBAoAA**AABZaPTDKJx+eAFgAAABYAABSAAAAdGV4dC5odG0gICAgICAgICAgICAgICAgICA g' pcre:body_checks.regexp OK The text within the quotes is pasted from the attachment which I displayed using postcat. Shouldn't this catch it? If I shorten the string enough, it will work. Am I overlooking something??? Also, adding -v to postmap I notice it's folding to lowercase. Fine for text searches, but is there something I can add to the expression to make the test case sensitive? (I know this doesn't address my problem!) Thanks!
