<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: Filename.rules.conf - CLSID false positive</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>> Bearing in mind Julian's reply, if you only get PDF's like </FONT>
<BR><FONT SIZE=2>> this, why not put in an "allow {CLSID}.pdf$" line above </FONT>
<BR><FONT SIZE=2>> Julian's "deny anything with a CLSID in" line? Or use a </FONT>
<BR><FONT SIZE=2>> ruleset to turn off filename checking for that domain?</FONT>
</P>
<P><FONT SIZE=2>That's not a bad idea (the allow line). I try not to let any domain bypass a particular filtering method with all of the 'forged' messages that are prevalent today. </FONT></P>
</BODY>
</HTML>
-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail@jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at http://www.mailscanner.biz/maq/ and the archives
at http://www.jiscmail.ac.uk/lists/mailscanner.html