Ok so ive been playing with this for a while and this one seems to work = pretty well.
/^\s*name=3D\S*\.((exe|ex_|eml|scr|pif|bat|shs|shb|vxd|rm|chm|vbs|ini|cmd= |hta|reg|lnk|js|jse|com|net))/ WARN Unsafe attachment type ".$1" Of course if you use it you may want to put REJECT in place of WARN :) Keith J. Kikta [EMAIL PROTECTED] voice: 1.800.697.7088 fax: 713.868.2268 http://www.iland.com/ - iland Internet Solutions Corporation The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you = received this in error, please contact the sender and delete the material from = any computer.=20
