This has seemed to work for me
file_list_1_scanner = 0
file_list_1_policy = save
file_list_1 = (?i)(winmail\.dat
file_list_1 += |\.(exe|vb[es]|c(om|hm)|bat|pif|lnk|s(ys|cr))
file_list_1 += |(\.g?z|\.bz\d?)*)$
But I am having a problem where it is saying
NOTE: An attachment was deleted from this part of the message,
because it failed one or more checks by the virus scanning system.
The file has been quarantined on the mail server, with the following
The removed attachment's original name was:
It is recommended that you contact your system administrator if you
need access to the file. It might also be a good idea to contact the
sender, and warn them that their system may be infected.
For every email. I get this no matter what is in the body of the message.
Senior Infrastructure Engineer
From: Sergio J Rojas H [mailto:email@example.com]
Sent: Friday, August 03, 2001 1:27 PM
Subject: Re: [anomy-list]: About ... doc.lnk
Yes I know!, but i set on a drop policies .lnk, but it doesn't work.
Don't block doc.lnk attachments.
How can I block that?
Thanx in advance!
Sergio J Rojas H \(*)|\
Direccion de Sistemas\ --_\o
Proeza y Asociados \(*)!
Tel 54802659 \
ICQ 44935299 \
There are not problems, only solutions
On Fri, 3 Aug 2001, Romek wrote:
> .doc.lnk is a Sircam.worm - better do not open it.
> At 21:35 02-08-01 -0500, you wrote:
> > Hello everybody!
> > Can Anybody send me how block .doc.lnk attachments.
> > I see this thread, today.
> > But i made a mistake and delete that messages ..
> > Thanx in advance...
> > __o
> > _`\<,_
> > (*)/ (*)
> Romek Zylla
> ~~~~~~~~~~~ after all the work done by Micro$oft (R) ~~~~~~~~~~
> Personal Computer Science is an experimental one (C)