> Well in case u need some semi intelligent way to deal with this kinda
> mail your current approach is just fine. But if u want to minimize the
> traffic on your mail server at any cost just simple attachment extension
> matching (which is basically what mime header check does) is the way to
> go :).

> My current filter is based on only one line which goes like this:
>
>
/name=[^>]*\.(ade|adp|asd|bas|bat|chm|cmd|com|cpl|crt|dbx|dll|exe|hlp|hta|inf|ins|isp|lnk|js|jse|lnk|ocx|mde|mdt|mdw|msc|msi|msp|mst
|nws|ops|pcd|pi|pif|prf|reg|scf|scr|sct|shb|shm|shs|swf|uue|vb|vbe|vbs|vbx|vxd|wab|wsc|wsf|wsh)/ REJECT Potentially dangerous file
attachment. Please do not include any executable attachments in your email.
>
> That one line has completely blocked all the crap thats been going around
> last few weeks.

I did want something a tad more intelligent than the nuke at all costs approach
to attachments as I do get some legit ones - like Mark just sent me - he sent
the source to a little app he did to strip the CRs out of the file - those attachments
I want to get.

Chrissy.

PS
- best spam blocker of all time - use the phone for messages
- best anti virus measures of all time - turn off the bloody computer and go to the beach

-- 
This message is part of the NZ ADSL mailing list. 
see http://unixathome.org/adsl/ for archives, FAQ, 
and various documents. 
To unsubscribe: send mail to majordomo@lists.unixathome.org 
with "unsubscribe adsl" in the body of the message