On Sat, Jun 17, 2006 at 06:05:43PM +0200, Michael Monnerie wrote:
> Hello list, today I had a forged ebay e-mail containing an attachment 
> with a trojan. I would like to filter for the attachment name, is that 
> possible without a "full" rule?

Sure.  Use the MIMEHeader plugin.  (you can even check out the other
attachment name-related rules that exist... ;) )

(full rules -- boo!)

-- 
Randomly Generated Tagline:
"There is hopeful symbolism in the fact that flags do not wave in a
 vacuum."               - Arthur C. Clarke

Attachment: pgpDdpUFgsW0r.pgp
Description: PGP signature

Reply via email to