benny pedersen pejuncorg sat february 23 2008 1552 dave koontz wrote still getting storm worm messages caught even sane security clamav thought id write rule score url dot exe scr pif extension however rule working someone help advise wrong want pickup http https extensions body dangerous_url http1200exescrpifi describe dangerous_url dangerous url score dangerous_url 75 tested antivirus plugin caught postfix mime_header_checks filenamebatchmcmdcomdoexehtajsermscrpifvbevbsvxdxl reject security reasons reject attachments type scontentdispositiontypenamesscpllnkasdhlpocxregbatchomcmdexedllvxdpifscrhtajseshmbsvbesxwsfhwavmovwmfxls reject attachment type allowed file 2 unacceptable extension 3 take care line wraps fri 08 aug 2008 003616 0100 please help rule