On Sat, Jun 17, 2006 at 06:05:43PM +0200, Michael Monnerie wrote: > Hello list, today I had a forged ebay e-mail containing an attachment > with a trojan. I would like to filter for the attachment name, is that > possible without a "full" rule?
Sure. Use the MIMEHeader plugin. (you can even check out the other attachment name-related rules that exist... ;) ) (full rules -- boo!) -- Randomly Generated Tagline: "There is hopeful symbolism in the fact that flags do not wave in a vacuum." - Arthur C. Clarke
pgpDdpUFgsW0r.pgp
Description: PGP signature