straight from the knowledge base
(http://support.ipswitch.com/kb/IM-19990609-DM06.htm):
B~(name=".*\.vbs"\s|name=".*\.shs"\s|name=".*\.scr"\s):spambox
B~(begin 6.*\.vbs\s|begin 6.*\.shs\s|begin 6.*\.scr\s):spambox
These rules include the \s text pattern to search for "any white space"
(spaces, tabs or Carriage Returns) after an attachment extension. Without
this pattern, the number of false positives will rise, principally due to
html attachments tripping up on the UUencoding rule.
At 8/6/01 01:44 PM, you wrote:
>>>>Would anyone know why these filters would catch attachments with a url
>>>>extention?
>>>
>>>My guess would be that the filename with the URL extension has ".com" in
>>>it, too.
>>
>>Nope. Just plain-jane url's. No virus, no sircam, no secondary
>>extentions. In fact, I've looked at the source code for these pages, and
>>there's no character string which would trigger the filters.
>
>A .url link named "www.yahoo.com.url" has ".com" in it. Computers can't
>distinguish between ".com" as in "Commercial top-level Internet domain"
>and ".com" as in "COM file".
>
> -Scott
>
>Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
>IMail. http://www.declude.com
>
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html to be
>removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Elise Lewis mailto:[EMAIL PROTECTED]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
