Jason, I tried what you suggested and used the "/" but didn't seem to have any luck. This is the actual header element that I'm trying to catch:
X-MessageWall-Warning: MIME/REJECT: body part contains disallowed string: Blocked sample txt This is the exact line from the quarantine-attachement.txt file: MIME\/REJECT: body part contains disallowed string<tab>Virus-X-MessageWall-Warning:<tab>SPAM or Virus based body text Blocked per Email Scanning Policy Is it correct to reference the header as "Virus-X-MessageWall-Warning:" or should I use another header reference? Thanks Ron On Wed, 2002-08-21 at 17:22, Jason Haar wrote: > On Wed, Aug 21, 2002 at 02:59:02PM -0400, Ron Culler wrote: > > My quarantine-attachement.txt syntax is: > > > > MIME/REJECT: body part contains disallowed string<tab> > > Virus-X-MessageWall-Warning:<tab> SPAM or Virus based body text detected > > > > This is a regex string - so you need to escape the "/" > > Try: > > MIME\/REJECT: body part contains disallowed string<tab> > Virus-X-MessageWall-Warning:<tab> SPAM or Virus based body text detected > > Also, if that header has any other chars in it, you should appened ".*" at > the end to catch them > > > -- > Cheers > > Jason Haar > Information Security Manager, Trimble Navigation Ltd. > Phone: +64 3 9635 377 Fax: +64 3 9635 417 > PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 > > > ------------------------------------------------------- > This sf.net email is sponsored by: OSDN - Tired of that same old > cell phone? Get a new here for FREE! > https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general ************************************************************************************************** The Firelan(tm) Virus Scanning Service has scanned this email for viruses, vandals and malicious content. http://www.firelan.net ************************************************************************************************** ------------------------------------------------------- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
