[pmmail-list] Filter for newest virus

Maynard pmmail-list@blueprintsoftwareworks.com
Wed, 28 Nov 2001 08:54:38 -0600 (CST)


I'm currently using

(a="yes" & h.fromid.-b="_")

The underscore test alone _*may_* be sufficient.

I don't want to use body testing for "Content-Type: audio/x-wav;" but
perhaps it could be added to the end of the test string above without
too much performance hit; will keep on lookout for false positives or
negatives.

	`~Maynard

- pmmail-list - The PMMail Dicussion List ---------------------------
To POST to the list, send your message to:
pmmail-list@blueprintsoftwareworks.com

To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first 
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com
---------------------------------------------------------------------