Thanks Scott, its much clearer now, any ideas about why the rule is
triggered?
Henrie.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: dinsdag 30 mei 2000 15:42
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] rules problem
> Is it safe enough to change the rule to check for vbs in the
> message headers only?
No.
Under normal circumstances, file names of attachments do NOT appear in the
standard message headers. They appear in the headers of the individual MIME
attachments, which are very different. The one case that I am aware of
where the filename will appear in the message header is if there is no
message body, and only one attachment. In that case, the E-mail will be
treated as if it is a file, rather than an E-mail, and the MIME headers will
be part of the message headers.
-Scott
> Using Imail v5, we use a rule to filter all vbs scripts and lead them to a
> seperate mailbox. This is the rule:
> B~\pvbs:VBS
> But this rule sometimes triggers on more than only vbs attachments. I've
> looked into these emails with a hex editor but can find nothing what
causes
> the rule to be triggered, but I suspect some code in the uuencoded
> attachment does, like +vbs or /vbs.
> Is it safe enough to change the rule to check for "dot"vbs in the message
> headers only?
> Any ideas? Maybe there's a better way for protection?
> Thanks in advance,
> Henrie.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
