A couple of further questions.  I was looking through your howto on the spamassassin site, and didn't see any info on full type rules.  So where I would normally put header, body, etc, I'd put full, correct?  Is there some way I could eliminate the /Content-Disposition: attachment;.{0,30} portion of the rule and just search for the filename=.{0,50}\.foo\.bar/i portion of the rule, since because the extension is specific to our organization, a match on that filename would be enough?


>>> Matt Kettler <[EMAIL PROTECTED]> 5/20/2005 11:16:58 AM >>>
Joe Zitnik wrote:
> I'd like to write a custom rule that would allow e-mail in from users
> that have an attachment with a weird in house extension like foo.bar .
> How would I do this?

You'd need to use a full rule, as body and rawbody won't be able to see the mime
section headers.

You'll want to have the rule target headers like this:
Content-Disposition: attachment; filename="EVI-Attachment-Warning.txt"

Sometimes, these headers wrap like this one:

Content-Disposition: attachment;
    filename="00_non_deliverable.cf"

A full rule won't cover the linewrap, so you need to include an optional \s or .
after the attachment part.

So something like this should work:

full L_FOO_BAR        /Content-Disposition: attachment;.{0,30}
filename=.{0,50}\.foo\.bar/i



Some files can have an inline disposition, but I doubt your in-house extension
does. That's usually used for text, html and/or graphics that a mail client can
render.

Reply via email to