Content filter with pound-sign

[k.porvari]

I'm trying to write a content filter that looks for a text-string with pound-sign (£).

Seems that £-sign is somehow special.

My text-string is £brittish-1 but I don't find out how to match that string.

Any ideas about this ?

[Libin Varghese]

Hello,

I was able to get the content filter working for the pound-sign (£) on my lab device without issues.

Test: if (body-contains("£brittish-1", 1)) { quarantine("Policy"); }

and

Test: if (body-contains("£", 1)) { quarantine("Policy"); }

Using regex101.com I confirmed that £ does not have a special regex significance.

The only other thing I can think of is scan behavior under Security Services -> Scan Behavior

Action for attachments with MIME types / fingerprints in table above:

This should be set to Skip.

Thanks

Libin Varghese