Along this thread . . . Not everyone uses an anti-virus package. I run a Postfix relay in front of Exchange servers. I use Sybari AV on the Exchange side which allows me to use up to 4 separate scan engines and apply in multiple locations of transport. Each scan location allows for custom weightings on the response of the scan engines. While I understand it might be a good idea to also run it on the gateway, it really is not necessary.
Now to the point. I use Procmail to scan for attachment extensions and retain positive hits on the gateway for analysis. However, not everyone uses Procmail. So for those who do not use an AV product and do not use Procmail, it is certainly reasonable to try to accomplish this with SA regardless of your configuration. Posting a request to see if someone else can help with a rule is not unreasonable and does not deserve scorn just because the configuration is not understood. --Larry ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk