Maybe I am missing something. Maybe I have the rules
coded incorrectly.
The problem is that you are filtering for something that is found in E-mails you don't want to filter (which is why filters are very dangerous; you'd be surprised how often I have to send people E-mails such as "Turn off all fil-ters & re-spond" to bypass filters/rules they have set up).
Specifically, HTML will very often contain the term "NA ME=" (minus the space), and will very often contain ".c om" (again, minus the space).
It is extremely difficult to impossible to detect file attachment extensions reliably with rules (typically you need an AV scanner to do that with a high level of reliability).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no annual licensing fees.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
