> > > I guess the solution here to do both. Although I > > thought I read somewhere (can't find it now) that > > either the message_contains or entity_contains > > functions were to be depricated. > > Right. Your solution has to be to do both, and use > logic like this: > > 1) Found a virus in filter()? Delete or replace the > part. > > 2) Found a virus in filter_end(), but NOT in > filter()? Assume bizarre > MIME and reject or drop the entire message. >
Makes sense. Thanks for your help. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

