Rob, I use procmail here and use a procmail recipe to tag the EXE such files. It's easier there than in SpamAssassin. I use the "nkvir" scripts to some good effect.
(Of course, Earthlink recently got "angry" with all the Sober nonsense and turned on everybody's SpamBlocker. My first reaction was annoyance. Then I decided to let it keep filtering them and simply take the results and mark THAT as spam. (One very easy test.) I still get my running statistics; and, I get another serious level of protection. I wish all ISPs would do something like this on general principles.) {^_^} ----- Original Message ----- From: <[EMAIL PROTECTED]> > As I'm on a mac there's a lot of file types I don't care about so I just have > perl scripts that go thru the mail using MIME::Entity etc and remove them. > > I based my code of some code Randall Schwartz wrote once to remove the annoying > WINMAIL.DAT attachments etc. > > Quoting Rob Blomquist <[EMAIL PROTECTED]>: > > > I have currently tuned my SARE spam filters, and am humming right along, I > > get > > one or 2 uncaught spams a day which is no big deal. But I would like to catch > > > > the virus emails that have Win exe, scr, bat, and the like for attachments, > > but I can't find a rule for them. > > > > Is there one? How can I catch them otherwise? > > > > Rob > > -- > > > > Linux Desktop user since 2000, > > Home networker since shortly after. > > > > Linux User #183693 > > http://counter.li.org/