[pmmail-list] SirCam Virus Filtering Update

[Maynard]

On Thu, 02 Aug 2001 16:27:27 -0400, Alan Cummings wrote:

>As a recent re-subscriber to this list I was wondering if anyone could
>possibly re-post the "virus filtering techniques", or even send them to 
>me personaly. I would be very grateful.

The first of these alone should do it, if you want the filter at the
top of the filter sequence and you don't want to burden the system with
excessive unnecessary processing. The other two will help prevent any
false-positives, but since lower case d in Date: field is out of spec,
it certainly isn't frequently used.

header.-s="date: "
&message.size>"134000"
&attachment.name="$header.subject$"

note that attachment minimum size of "134k" could be established x1024
and that the header.subject is just a subset of the attachment.name

	`~Maynard

- pmmail-list - The PMMail Dicussion List ---------------------------
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first 
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com