That will catch ".com" text in emails and attached emails. You get alot of false positives.
I actually came up with a better solution.
B~Content-Disposition\:\sattachment;\s*filename=".{0,100}\.com"\s{1,10}:[EMAIL PROTECTED]
It's reduced the number of false positives down signifcantly. The only real gotcha is if the filename is over 100 characters long
... and that it won't catch "name=", just "filename=".
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
