Hi Group... I need to verify rules building syntax and includes for imail. I got the following from the Imail Support page, but yet the implementation is not entirely clear to me. Is the syntax correct? Do you create a set of rulles under every domain (Rules Tab) or do you create a file with the extension of .ima and place this file in each domain? Any help is appreciated Could someone please clarify the syntax for attempting to prevent the Nimda virus... as well as maybe other attachement types... The *************Definition begins...**************** The virus is spreading both through the now traditional method of reading a local client's address book, as well as through infected web servers. The client payload of the virus, readme.exe actually tries to attack Microsoft IIS Web Servers with the Web Server Folder Traversal Vulnerability and make them carriers of the virus. The IIS Web Server version of the virus is called readme.eml. ******************************************** Is the following syntax correct? I used the examples from ipswitch but in finding them listed - there was no inclusion for the header, subject, etc... and felt as though these should also be included... B~(name=".*\.vbs"\s|name=".*\.shs"\s|name=".*\.scr"\s):[EMAIL PROTECTED] B~(begin 6.*\.vbs\s|begin 6.*\.shs\s|begin 6.*\.scr\s):[EMAIL PROTECTED] S~(name=".*\.vbs"\s|name=".*\.shs"\s|name=".*\.scr"\s):[EMAIL PROTECTED] S~(begin 6.*\.vbs\s|begin 6.*\.shs\s|begin 6.*\.scr\s):[EMAIL PROTECTED] H~(name=".*\.vbs"\s|name=".*\.shs"\s|name=".*\.scr"\s):[EMAIL PROTECTED] H~(begin 6.*\.vbs\s|begin 6.*\.shs\s|begin6.*\.scr\s):[EMAIL PROTECTED] F~(name=".*\.vbs"\s|name=".*\.shs"\s|name=".*\.scr"\s):[EMAIL PROTECTED] F~(begin 6.*\.vbs\s|begin 6.*\.shs\s|begin 6.*\.scr\s):[EMAIL PROTECTED] T~(name=".*\.vbs"\s|name=".*\.shs"\s|name=".*\.scr"\s):[EMAIL PROTECTED] T~(begin 6.*\.vbs\s|begin 6.*\.shs\s|begin 6.*\.scr\s):[EMAIL PROTECTED] N~(name=".*\.vbs"\s|name=".*\.shs"\s|name=".*\.scr"\s):[EMAIL PROTECTED] N~(begin 6.*\.vbs\s|begin 6.*\.shs\s|begin 6.*\.scr\s):[EMAIL PROTECTED] B~(name="readme.exe\s|name="readme.eml\s):[EMAIL PROTECTED] S~(name="readme.exe\s|name="readme.eml\s):[EMAIL PROTECTED] H~(name="readme.exe\s|name="readme.eml\s):[EMAIL PROTECTED] F~(name="readme.exe\s|name="readme.eml\s):[EMAIL PROTECTED] T~(name="readme.exe\s|name="readme.eml\s):[EMAIL PROTECTED] N~(name="readme.exe\s|name="readme.eml\s):[EMAIL PROTECTED] I have been through your website and think this is setup ok. Do I then need to copy this file to all domains or add it into all domains as a new rule(s)? When I create a new file called rules.ima, the IMail wants to create a file called" rules.ima.rul", If I use your rules tab definition under the domain... Chris Moos M Systems Software, LLC [EMAIL PROTECTED] U.S.A. 1-781-961-4566 ______________________________________________________________________ The HKSI-IMail Admin List is hosted by........ Humankind Systems, Inc. Questions, Comments or Complain like Hell.. mailto:[EMAIL PROTECTED] Message Archive... http://www.tallylist.com/archives/index.cfm/mlist.4 To Manage your Subscription......... http://humankindsystems.com/lists
