Yes, I think this is what you need,
qr'(?#BLOCK EXECUTABLES IN ZIP) ^ (.*\t)? T=zip (\t.*)? (.*\n)+
(.*\t)? N=[^\t\n]* \.
(exe|vbs|pif|scr|bat|cmd|com|cpl) (\t.*)? $'xmi,
Danny
---
This SF.net email is sponsored by: Splunk
hello,
is it possible to block zip-attachments only if the zip contains an exe-file ?
thanks
--
Andreas Schulze
DATEV eG, Paumgartner Strasse 6-14, D - 90429 Nürnberg
Abt. Internet- und Securitydienste
Telefon : +49 911 276 2648
Telefax : +49 911 276 7892
Mobil : +49 172 8122883
E-Mail :
