Re: [IMail Forum] inbound message rules

[Doug Anderson]

Marcin,     That will catch ".com" text in emails and attached emails. You get alot of false positives.   I actually came up with a better solution.   B~Content-Disposition\:\sattachment;\s*filename=".{0,100}\.com"\s{1,10}:[EMAIL PROTECTED]   It's reduced the number of false positives down signifcantly. The only real gotcha is if the filename is over 100 characters long ----- Original Message ----- From: Marcin Zastawny To: [EMAIL PROTECTED] Sent: Monday, November 10, 2003 1:40 PM Subject: Re: [IMail Forum] inbound message rules Hi Doug, check this out - maybe this will help: http://support.ipswitch.com/kb/IM-19980116-DD08.htm   There is a section there like this: I WANT TO FILTER CERTAIN EMAIL ATTACHMENTS: As .vbs and script viruses are turning up, a customer suggests these rules: B~name=".*\.exe":spambox B~name=".*\.scr":spambox B~name=".*\.vbs":spambox B~name=".*\.shs":spambox B~name=".*\.com":spambox B~begin 6".*\.exe":spambox B~begin 6".*\.scr":spambox B~begin 6".*\.vbs":spambox B~begin 6".*\.shs":spambox B~begin 6".*\.com":spambox   ----- Original Message ----- From: Doug Anderson To: [EMAIL PROTECTED] Sent: Tuesday, November 04, 2003 6:22 PM Subject: [IMail Forum] inbound message rules I've been trying to figure this out haven't found a way to do it...call me a newbie. I want to block com files from coming through the server, yet allow "dot com" email addresses to come through. The rules IP switch recommends blocks both the files and all dot coms....ie aol.com, nwa.com...   Anyone got a good rule to catch it?