On Sat, 20 Sep 2003, Kevin Waterson wrote: > > Just using the Filesname rules, will protect your from being hurt deeply :) > > Can it be done without installing 3rd party software? The following rule in /etc/procmailrc or ~/.procmailrc seems to work just fine for me: :0 * ^(Content-Type: MULTIPART/MIXED|APPLICATION/octet-stream|audio/x-midi) { :0 HB * ^(Content-Disposition: attachment|inline) * name=".*\.(ocx|vbs|wsf|shs|exe|chm|pif|vbe|hta|scr)" /tmp/viruses.hold } Once you are comfortable with it (after examing /tmp/viruses.hold every now and then), replace /tmp/viruses.hold with /dev/null. Atul -- ------------------------------------------- Atul Chitnis | achitnis@xxxxxxxxxxx Exocore Consulting | http://www.exocore.com Bangalore, India | +91 (80) 344-0397 ------------------------------------------- -- Shrike-list mailing list Shrike-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/shrike-list