blocking specific file names

Chris Yuzik chris at fractalweb.com
Wed Nov 5 16:23:56 GMT 2003


Until we figure out the best thing to do with viruses that arrive in zips with
corrupted headers, I considered blocking the particular file name in
filename.rules.conf. Since (to my knowledge) worm.mimail.g always arrives in
a zip named "readnow.zip", I figured I could just block that name.

Well, obviously I'm doing something wrong because it's not working.

deny    \^readnow\.zip$

What did I mess up?

Chris
--
Chris Yuzik
chris at fractalweb.com
604-304-0444

"Reality is that which, when you stop believing in it, doesn't go
away".
                -- Philip K. Dick



More information about the MailScanner mailing list