> Is it safe enough to change the rule to check for .vbs in the
> message headers only?
No.
Under normal circumstances, file names of attachments do NOT appear in the standard
message headers. They appear in the headers of the individual MIME attachments, which
are very different. The one case that I am aware of where the filename will appear in
the message header is if there is no message body, and only one attachment. In that
case, the E-mail will be treated as if it is a file, rather than an E-mail, and the
MIME headers will be part of the message headers.
-Scott
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
