If I'm reading the RFC's (2183) correctly. Content-Disposition would either
be inline or attachment.
Filename would go with attachment, in particular with runable extensions
within an OS.
(used * in example as period to bypass our rules)
Content-Type: application/octet-stream;
name="Progname*COM"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="Progname*COM"
6atZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
and so forth
if you want to catch Content-type you could do
Content-type\:\s.{1,80}\s*name=".{0,100}\.com"\s{1,10}
The reason I didn't do that was I've always seen attachment; filename.....
If you've seen otherwise, let me know...it's easy to adjust.
What IPSwitch needs to do is just put the i/o rules as a full reg expression
evaluators. It would make it easy to handle.
----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, November 10, 2003 2:58 PM
Subject: Re: [IMail Forum] inbound message rules
>
> >All cases that I tried had the full "filename" in (AOL client, AOL
webmail,
> >Earthlink webmail, outlook 2000, outlook express 6) it.
> >If a .com file is attached is there an instance where it would only have
the
> >name=whatever.com?
>
> If I recall correctly, MIME requires "filename=" in one of the headers,
but
> "name=" in another (Content-Disposition?). So if only one of those two
> headers is present, you may see "name=" but not "filename=".
>
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
> Declude Virus: Catches known viruses and is the leader in mailserver
> vulnerability detection.
> Find out what you've been missing: Ask about our free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
