This can happen if there is a filename=<any number of characters>.pif...this is the problem with using filters instead of an AV program...some false positives are inevitable
Eric S ----- Original Message ----- From: "Tom Le" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 04, 2003 3:38 PM Subject: RE: [IMail Forum] Inbound rules filename or bodytext ??? > To follow-up on this original message. > > How do I create a filter for an attachment filename only, and not have > the rule also filter on the contents of the attachment? > > E.g., for sobig, I use the following rule: > > B~filename=.star\.pif!OR!B~filename=.star\.scr:spambox > > (I used star intead of "*" b/c if I use "*" this email gets returned to > me as containing a virus). > > ...but if I include an attachment of, say a copy of this same email with > any extension, the above rule filter the message. > > Tom > > > | -----Original Message----- > | From: [EMAIL PROTECTED] > | [mailto:[EMAIL PROTECTED] Behalf Of Bj�rn Nornes > | Sent: Wednesday, August 27, 2003 11:16 PM > | To: [EMAIL PROTECTED] > | Subject: [IMail Forum] Inbound rules filename or bodytext ??? > | > | > | Inbound rules ... filename or bodytext ???? > | > | setting up an inbound rule will also delete any mail > | containing the text > | eg: > | codebase="http://www.macromedia.com/flash4/cabs/swflash.cab"; > | > | as it contains a file extention (.com) > | > | I assumed that the rule only should check for attachments > | with the file > | extention com. > | > | Is this correct or a bug ? > | > | Running release 8.02 > | > | mvh > | Bj�rn Nornes > | Driftansvarlig ASP > | > | Bragd AS > | tlf : 70 16 06 60 > | fax : 70 16 06 51 > | mob: 90 17 34 43 > | http:/www.bragd.no/ > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
