Thanks Scott! As usual.. that is obvious now that someone so noteably pointed it out. :)
I can't prevent people's e-mailers from adding syntax like that, but I see what it is true now. I didn't figure the 'name' part mattered, but I don't know much about IMail rules other than what IPSwitch has put in their KB. I have tried McAfee Webshield SMTP scanning and banning certain attachments.. handing off mail to IMail, but even COM, EXE, BAT, VBS, SCR, PIF and the lot get through it occassionally. I guess nothing is perfect. I just wanted IMail to be the last line of defense after everything else I might have preceeding it. What do these new rules look for that filter COM attachments? I'd like to give them a try. I guess I could search the list, but if anyone knows them right-off, I'd like to look at them. Thanks! Ben ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, November 17, 2003 4:08 PM Subject: Re: [IMail Forum] IMail Rule Peculiarity > > >Any idea why e-mails containing this syntax in it are filtered with my COM > >rule (to delete COM attachments)? > > > >Here's the IMail rule: > > > >name=".*\pcom" > > > > > >Here's the specific syntax of the e-Mail that triggers it as TRUE: > > > ><meta name=""> > ><href="mailto:[EMAIL PROTECTED]"> > > Let me ask you this -- why do you think the rule should not catch that > E-mail? It has 'name="' followed later by '.com'. > > >It doesn't seem a problem with a > >specific e-mail client as it does with IMail interpretting certain syntax as > >COM files. I'm using IMail 7.07. Is this a bug or is my rule not correct? > > It's a very, very poor Ipswitch Knowledge Base article that you took the > advice of. > > When in doubt, ask the list. :) > > There are much better rules that have been posted on this list. Still, no > filter will be able to catch 100% of all attachments and 0% of all > non-attachments. For that, you need to use a mailserver AV program (or > other type of content scanner) that supports banning of file extensions. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
