Hello Marck.

At 5:59 PM on Monday, November 26, 2001 you wrote the
following on the posted subject 'ATT: Marck re: filtering
attachement extensions':

Marck> name=".*\....\.scr"'

Marck> is the regexp equivalent. '.' is a regexp meaning
Marck> "any character", '*' means zero or more of the
Marck> preceding character (or wildcard special character)
Marck> and '\.' is the regexp for "a real 'dot'".

Marck> The problem is that the "lower headers" are not
Marck> deemed by filtering to be a part of the "kludges".
Marck> Nor are they visible as a part of the "body". So
Marck> filtering is tricky.

  Since its been determined that TB! won't filter on the
  'lower' headings, I have created the following filter

----------------> Begin Filter <--------------

Rule = Inbox MOVE to Probable Virus

Filtering Strings
 '.' (no quotes)
 Location = text
 Presence = no

Regular Expressions selected

Advanced = Message has attachments is selected

-----------------> End Filter <---------------

  This filter is supposed to spot any inbox message where
  there is no text whatsoever & has an attachment. This msg
  is to be moved to a PROBABLE Virus folder for further
  scrutiny. To date, I've probably received 50 msgs of this
  type, all of which contain a virus. Its making me crazy.

  Does the filter make sense to you?

-- 
Jan Rifkinson
Ridgefield, CT USA
TB! V1.54 Beta/14/W2K_SP2/PGP Key ID: 0x3F14A060
ICQ 41116329


-- 
________________________________________________________
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Unsubscribe: mailto:[EMAIL PROTECTED]
Latest Vers: 1.53d
FAQ        : http://faq.thebat.dutaint.com 

Reply via email to