Jerry Preeper <preeper(_at_)cts(_dot_)com> writes:
If I can ask real quick, will this recipe in an rc file catch anything with
a .vbs file?
:0 f
* ^Content-.*: .*\.vbs
|formail -A "X-Spam-Reject: rc.viruses - vbs attached"
No, because the filename only appears in the attachment header. Since this
is a multipart message, those are in the body of the message. I've been
using the following recipe:
:0
* 9876543210^0 ^Content-[-a-z0-9_]+:.*="?[^"]*\.vbs
* 9876543210^0 B ?? ^Content-[-a-z0-9_]+:.*($[ ].*)*="?[^"]*\.vbs
$BOG/vbs/$DEST
That's a space and tab in the brackets on the second condition line.
Philip Guenther