Price zip?

[Max Kipness]

I tried adding the following:

deny    \price.zip$     New virus outbreak      New virus outbreak

Tab separated and then mail stopped processing through MailScanner. I
walked away and when I came back there were 180 messages waiting to be
processed. I removed this line and all is well.

Can anyone see what is wrong with this line?

Thanks,
Max 

> -----Original Message-----
> From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Dustin Baer
> Sent: Monday, August 09, 2004 3:02 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Price zip?
> 
> Put this in filename.rules.conf, tab separated
> 
> deny    \.zip$     New virus outbreak    New virus outbreak. Temporary
> denial of zip files
> 
> 
> 
> 
> Max Kipness wrote:
> 
> > Can someone offer a tip on how to block all zip attachments 
> with the 
> > word price in it (caps or small letters), I can never seem 
> to get the 
> > syntax right in the filetypes rule.
> >
> > Thanks,
> > Max
> >
> >     
> --------------------------------------------------------------
> ----------
> >     From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK]
> >     On Behalf Of Chris Sweeney
> >     Sent: Monday, August 09, 2004 2:49 PM
> >     To: MAILSCANNER at JISCMAIL.AC.UK
> >     Subject: Re: Price zip?
> >
> >     Yep in the last hour or so its been crazy!
> >
> >     --
> >     Thanks
> >     Chris
> >
> >
> >     ---------- Original Message -----------
> >     From: Max Kipness <mkipness at GENIANT.COM>
> >     To: MAILSCANNER at JISCMAIL.AC.UK
> >     Sent: Mon, 9 Aug 2004 14:41:30 -0500
> >     Subject: Price zip?
> >
> >     > Hello -
> >     >
> >     > Anybody getting flooded with various named zip 
> attachments with
> >     viruses in them? Some are being caught as a bagel variant, some
> >     are getting through.
> >     >
> >     > Thanks,
> >     > Max
> >     >
> >     > --
> >     > This message has been scanned for viruses and
> >     > dangerous content by MailScanner 
> <http://www.mailscanner.info/>,
> >     and is
> >     > believed to be clean. -------------------------- MailScanner
> >     list ----------------------
> >     > To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
> >     <mailto:jiscmail at jiscmail.ac.uk>
> >     > Before posting, please see the Most Asked Questions at
> >     > http://www.mailscanner.biz/maq/ and the archives at
> >     > http://www.jiscmail.ac.uk/lists/mailscanner.html
> >     ------- End of Original Message -------
> >
> >     --
> >     This message has been scanned for viruses and
> >     dangerous content by MailScanner <http://www.mailscanner.info/>,
> >     and is
> >     believed to be clean. -------------------------- 
> MailScanner list
> >     ----------------------
> >     To leave, send leave mailscanner to jiscmail at jiscmail.ac.uk
> >     <mailto:jiscmail at jiscmail.ac.uk>
> >     Before posting, please see the Most Asked Questions at
> >     http://www.mailscanner.biz/maq/ and the archives at
> >     http://www.jiscmail.ac.uk/lists/mailscanner.html
> >
> > -------------------------- MailScanner list 
> ---------------------- To 
> > leave, send leave mailscanner to jiscmail at jiscmail.ac.uk 
> > <mailto:jiscmail at jiscmail.ac.uk> Before posting, please see 
> the Most 
> > Asked Questions at http://www.mailscanner.biz/maq/ and the 
> archives at 
> > http://www.jiscmail.ac.uk/lists/mailscanner.html
> 
> 
> --
> Dustin Baer
> Identity Management Architect
> Information Handling Services
> 15 Inverness Way East
> Englewood, CO 80112
> 303-397-2836
> 
> Confidentiality Notice: The information in this e-mail may be 
> confidential and / or privileged. This e-mail is intended to 
> be reviewed by only the individual or organization named in 
> the e-mail address. If you are not the intended recipient, 
> you are hereby notified that any review, dissemination or 
> copying of this e-mail and attachments, if any, or the 
> information contained herein, is strictly prohibited.
> 
> -------------------------- MailScanner list ----------------------
> To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
> Before posting, please see the Most Asked Questions at
> http://www.mailscanner.biz/maq/     and the archives at
> http://www.jiscmail.ac.uk/lists/mailscanner.html
> 

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html