From owner-freebsd-questions  Tue Oct 10 16:15: 8 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.telestream.com (mail.telestream.com [205.238.4.5])
	by hub.freebsd.org (Postfix) with ESMTP id D935237B68C
	for <freebsd-questions@FreeBSD.ORG>; Tue, 10 Oct 2000 16:15:04 -0700 (PDT)
Received: from localhost (keith@localhost)
	by mail.telestream.com (8.11.0/8.11.0) with ESMTP id e9ANF3624721
	for <freebsd-questions@FreeBSD.ORG>; Tue, 10 Oct 2000 16:15:03 -0700
Date: Tue, 10 Oct 2000 16:15:03 -0700 (PDT)
From: <keith@telestream.com>
To: freebsd-questions@FreeBSD.ORG
Subject: Re: Procmail 
In-Reply-To: <Pine.LNX.4.10.10010101424220.21073-100000@mail.telestream.com>
Message-ID: <Pine.LNX.4.10.10010101610440.24597-100000@mail.telestream.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

In response to my own posting. I found this to work great for getting
offending .vbs files from mail attachements. The original posting I got
from dejanews.

http://x70.deja.com/[ST_rn=ps]/getdoc.xp?AN=638845263&search=thread&CONTEXT=971217185.42205279&HIT_CONTEXT=971215500.33226801&HIT_NUM=102&hitnum=2


ws = '[         ]*'
bodyws = '[     ]*($[   ]+)*'
dotstar = '.*($[        ].*)*'
fieldname = 'Content-[-a-z0-9_]+'
vbs = '"?[^"]*\.vbs'

:0
* 9876543210^0      $ ^${fieldname}:.*=${ws}${vbs}
* 9876543210^0 B ?? $ ^${fieldname}:${dotstar}=${bodyws}${vbs}
/tmp/vbs-found

Keith




=================================
Keith W.
At the helm <for better or worse>

My non work related site
www.cydonia.net
=================================


On Tue, 10 Oct 2000 keith@telestream.com wrote:

> Anyone have a clue what kind of rule would I need to filter out things
> that are an Attachement on a mail via procmail?
> I've got things filtering fine by subject and sender but would like to be
> able to work the attachment as well. 
> 
> Thanks. 
> 
> Keith
> 
> 
> =================================
> Keith W.
> At the helm <for better or worse>
> 
> My non work related site
> www.cydonia.net
> =================================
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message