stop attachments w/o false positives?

[SirJohn88]

I set up some rules to filter for attachments that could be viruses, but am getting false positives when the sender name has a dot exe in it, such as adamwest.batman@batcave. Is there any way to narrow the inbound filter so it will not trigger if the extension is followed by a character and not a space? My rule syntax is presently: b~name=.*\.bat:spambox

Aside frome the false positives, this is working very well to stop some of the viruses which slip by the other filters so I really want to get this up (at present I am just copying messages and not forwarding).
Thanks.

 

[skotman]

SirJohn,
Unfourntatly the imail filters dont work that well (or too well depending on how you look at it), I suggest installing ASSP (assp.sourceforge.net) in front of imail to filter out spam and certain attachments.
Scott

Scott Heath

http://www.scottspad.com

AIM: orange7288
SprintPCS ReadyLink? IM ME

 

[SirJohn88]

thanks for the reply, I had given up hope. We recently picked up the symantec add-on for imail, so hopefully that will take care of the problem.