Try this as a domain level processing rule. B~(name=".*\.com"):NULL B~(filename=".*\.com"):NULL
-- Joseph Mann Tuesday, January 29, 2002, 11:30:30 AM, you wrote: Joseph> So that was after you heard about (and possibly were infected by) the virus, Joseph> then you filtered based on the subject line? That is what I had to do (an Joseph> alert user actually called and asked me about an infected email she Joseph> received). I'm wondering if anyone had a mechanism to catch it before it got Joseph> through. Joseph> Joseph Marlin Joseph> -----Original Message----- Joseph> From: [EMAIL PROTECTED] Joseph> [mailto:[EMAIL PROTECTED]]On Behalf Of Kenneth Bird Joseph> Sent: Tuesday, January 29, 2002 10:20 AM Joseph> To: [EMAIL PROTECTED] Joseph> Subject: RE: [IMail Forum] Who caught the latest virus before it caught Joseph> their users? Joseph> we caught them with decludes filter until the latest pattern files from Joseph> trendmicro kicked in. Joseph> Ken Joseph> Please visit http://www.ipswitch.com/support/mailing-lists.html Joseph> to be removed from this list. Joseph> An Archive of this list is available at: Joseph> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
