Yes, I think this is what you need, qr'(?#BLOCK EXECUTABLES IN ZIP) ^ (.*\t)? T=zip (\t.*)? (.*\n)+ (.*\t)? N=[^\t\n]* \. (exe|vbs|pif|scr|bat|cmd|com|cpl) (\t.*)? $'xmi,
Danny ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=click _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/