[Mimedefang] SoBig.E slipping through

[Minica, Nelson (EDS)]

Perfect Michael, thanks!  Mimedefang was seeing a " in front, where Outlook
was not...

     Quarantined attachment "your_details.zip contains a virus: [SoBig.E]

Nelson


-----Original Message-----
From: Michael Sims [mailto:michaels at crye-leike.com] 

I did some testing with Sobig.E and noticed that frequently MD thought the
filename was:

your_details.zip"

Note the trailing double quote.  I'm not sure why as I didn't spend a lot of
time with it, but I'm sure it has something to do with invalid MIME.  I
suggest you use a regex instead of the eq operator.  I suggest using this
instead:

if ($fname =~ /your_details\.zi/i) {