RE: [Exim] Regex gurus - KLEZ

Top Page
Delete this message
Reply to this message
Author: Steve Drees
Date:  
To: sharun, Odhiambo G. Washington, Exim Users
Subject: RE: [Exim] Regex gurus - KLEZ
> if $message_body matches "Content-Type:
> application/octet-stream;.*(?:file)?name=(\\\\S+\\\\.(?:ad[ep]|ba[


All of the klez I'm trapping have a Content-Type of audio/x-midi or
audio/x-wav