Any filter wizards out there?

[chuntmd_ironport]

In the message filters via the CLI (not the content filters via the GUI) I want to check to see if the attachment is ether called abc123.zip or 123abc.zip.

If true then do the Anti-Virus check but skip the Anti-spam check.

Something like:

If (attachment-filename == "(?i)^(abc123.zip|123abc.zip)$")
{
skip-spamcheck();
deliver();
}

Can filters be collected and posted somewhere?

Chris

[Donald Nash]

Looks good to me, although you don't need the call to "deliver()" unless you want to skip all the remaining filters as well.

I have no idea if IronPort has a place for us to share our useful filters. Might be a good idea...

[kisanak_ironport]

I have no idea if IronPort has a place for us to share our useful filters. Might be a good idea...

a public ftp server, permitted to customers only? or perhaps a mailing-list for customers is also such a nice place. IMHO.

[Donald Nash]

a public ftp server, permitted to customers only?

FTP is so 20th Century. :-) I was thinking a web forum of some sort, where the poster of a script could also provide a brief description of its function. In fact, I'd just make it another forum here on IronPort Nation.

[chuntmd_ironport]

I've got a bunch :)

Mostly checking to see what files are inside zips etc.

CH

[tminchin_ironport]

Maybe paste them into a message in the Tools section of this forum website?