Procmail filter question

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: plug-discuss@lists.plug.phoenix.az.us
Date:  
Subject: Procmail filter question
The server is running Procmail v3.10. I have a recipe in .procmailrc that drops emails with certain attachments:

-----
:0 B
* ^Content.*(file)?name=.*\.(hta|vbs|exe|scr|pif|lnk|bat|com)
/dev/null
-----

This catches most of them, but it misses the following email because "name=" is on a new line. That's fine, but there's also a tab before "name=".

-----
Subject: A special  funny website
Content-Type: multipart/alternative;
    boundary=C2d7M23S9A7E2ydC8z8944PN8KdX73HX028b
Date: 21 May 2002 10:27:42 -0400


--C2d7M23S9A7E2ydC8z8944PN8KdX73HX028b
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

...

--C2d7M23S9A7E2ydC8z8944PN8KdX73HX028b
Content-Type: application/octet-stream;
    name=FACE.scr
Content-Transfer-Encoding: base64
Content-ID: <OOPXO49t4jYs9h>


TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAA2AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4g
CjwvQk9EWT4NCjwvSFRNTD4NCj==
--C2d7M23S9A7E2ydC8z8944PN8KdX73HX028b--

-----


I've tried to filter it out:

* ^name=.*\.(hta|vbs|exe|scr|pif|lnk|bat|com)
* ^\bname=.*\.(hta|vbs|exe|scr|pif|lnk|bat|com)
* \bname=.*\.(hta|vbs|exe|scr|pif|lnk|bat|com)
* "\bname=.*\.(hta|vbs|exe|scr|pif|lnk|bat|com)"

But none of these work. Any ideas?

Alan