Frank Nørvig skribis:
* ^Content-Disposition: attachment;
*filename=.*\.(scr|lnk|vbs|swf|shs|com|pif|bat|src|wfs|vbe|wsh|hta)
It works quite well on attachments like "virus.com" but it also catches
files like "www.virusfree.com.document.zip"
I use something like:
:0
* ^Content-Type: multipart/(alternative|mixed)
* B ?? ^Content-Type: \
application.*;.*($.*)?\
name=.*\.(scr|com|bat|pif|lnk|exe)(")?$
IN.virus/
More 'special' extensions:
ade adp asd bas bat bin chm cil cmd com cpl crt dll doc dot drv
eml exe hlp hta inf ini ins isp jse lnk mdb mde msc msi msp mst
net nws ocx pcd pdf pif pps pwl reg rm scr sct shb shm shs src
swf sys vb vbe vxd wfs wsc wsh xls xlt
--
Affijn, Ruud
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail