Attachment Filters Not Working???

[TEST]

Alex,
I noticed this morning I received a message from a collegue that had a
CMD file attached to it. I checked my filter that was working under the old
EW1 version, but it doesn't seem to be working at all now. Here is what I
have tried:

If message has an attachment or
Parts header matches expression
name="?[^
]+.(?i)(bat)[^w]+
name="?[^
]+.(?i)(cmd)[^w]+
name="?[^
]+.(?i)(com)[^w]+
name="?[^
]+.(?i)(exe)[^w]+
name="?[^
]+.(?i)(js)[^w]+
name="?[^
]+.(?i)(pif)[^w]+
name="?[^
]+.(?i)(pl)[^w]+
name="?[^
]+.(?i)(scr)[^w]+
name="?[^
]+.(?i)(shs)[^w]+
name="?[^
]+.(?i)(vb)[^w]+
name="?[^
]+.(?i)(vbe)[^w]+
name="?[^
]+.(?i)(vbs)[^w]+
Then strip attachments.

If parts header matches expression
name="?[^
]+.(?i)(bat)[^w]+
name="?[^
]+.(?i)(cmd)[^w]+
name="?[^
]+.(?i)(com)[^w]+
name="?[^
]+.(?i)(exe)[^w]+
name="?[^
]+.(?i)(js)[^w]+
name="?[^
]+.(?i)(pif)[^w]+
name="?[^
]+.(?i)(pl)[^w]+
name="?[^
]+.(?i)(scr)[^w]+
name="?[^
]+.(?i)(shs)[^w]+
name="?[^
]+.(?i)(vb)[^w]+
name="?[^
]+.(?i)(vbe)[^w]+
name="?[^
]+.(?i)(vbs)[^w]+
Then strip attachments.

If parts header matches expression
name="?[^
]+.(?i)(cmd)[^w]+
Then strip attachments.

If parts header contains .cmd
Then strip attachments

If parts header contains *.cmd
Then strip attachments

If parts header matches *.cmd
Then strip attachments

If parts header matches .cmd
Then strip attachments

Any idea's where to look? What should the syntax be for a file extension
filter under EW2?

Thanks,
Bob Matlosz

[Alexander Telegin [SSS]]

They should be working. Could you please send me that message? (as
attachment)

- Alex

[TEST]

Alex,
You should have a copy of that message.

Bob

[Alexander Telegin [SSS]]

Bob, try following expression:

name="?[^
]+.(?i)(BAT|CMD|COM|EXE|JS|PIF|PL|SCR|SHS|VB|VBE|VB S)w?

- Alex