From: "Geoff Soper" <[EMAIL PROTECTED]>
> Could someone point me in the direction of a rule that would let me catch
> certain filetype extensions in attachements to emails?
This is for double extensions, Goeff. But you should be able to work out
a single extension version. (This is a second layer on the procmail rules
that should be filtering these exceptions here.)
full LOC_DBLEXT
/name="?[^"]*\.(?:html?|txt|doc|jpe?g|gif|wpd|pdf|zip)\.(?:pif|exe|com|cmd|b
at|scr)/i
describe LOC_DBLEXT Message has VIRUS-style double extension
score LOC_DBLEXT 2.5
Mind the wrap.
{^_^}
