[pmmail-list] SirCam Virus Filtering Update

[Lueko Willms]

On Sat, 04 Aug 2001 21:50:03 -0700 (PDT), Kris Sorem Sr wrote:

> For those interested, here is my optimised filter.
> ---begin filter---
> !(m.size<"137216") & a="YES" & a.name="$h.subject$" &
> (b="Hi! How are you?" | b="See you later. Thanks" |
> b="Hola como estas?" | b="Nos vemos pronto, gracias")
> ---end filter---

  Comments: 

  Why "!(m.size<"137216")? Why not simply m.size>"137216" or
m.size>"137215"?

  Seems easier to understand to me. 

  Second: in the body it is either the english pair or the spanisch
pair, so 

  ((b="Hi! How are you?" & b="See you later. Thanks") |
   (b="Hola como estas?" & b="Nos vemos pronto, gracias"))

  seems to be more accurate. I think in an earlier post you had it
this way, too. 

  As to the "date:" header being not capitalized, I have observed it
too. Why the virus experts at Norton Antivirus Center or McAffee
don't report it, I don't know. Maybe they have not looked at it or
they think that the normal user doesn't see the headers anyway. 

Yours, 
Lüko Willms 
Frankfurt/Main 
/ Lueko.Willms@T-Online.de 

- pmmail-list - The PMMail Dicussion List ---------------------------
To UNSUBSCRIBE, send a message to mdaemon@bmtmicro.com with the first 
line of the message body being...
UNSUBSCRIBE pmmail-list@blueprintsoftwareworks.com