<?xml version="1.0" encoding="utf-8"?>
<att_filter_expr><attach_filter><content_type_expr></content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>^.*?\.(386|acm|ade|adp|adt|ani|app|asd|asf|asp|asx|avb|bas|bat|bin|btm|cbt|chm|cla|class|clp|cmd|cnv|com|cpl|crt|csh|css|dll|drv|emf|exe|fon|fot|fxp|hhp|hiv|hlp|ht|hta|htb|hto|htt|if|inf|ini|ins|isp|its|job|js|jse|jtd|ksh|lib|lnk|mad|maf|mag|mam|maq|mar|mas|mat|mau|mav|maw|mda|mde|mdt|mdw|mdz|mht.*|mpd|mrc|msc|msi|mso|msp|mst|nws|ocx|oft|ops|ov.*|pcd|pci|pdi|pdr|perl|pif|pl|plx|pm|pnf|pot|prc|prf|prg|ps|pst|py|qtl|reg|rexx|rpm|sami|scf|scr|sct|sh|shb|shs|smi|smm|so|swf|sys|tcl|tlb|tmp|tsp|url|vb|vbe|vpb|vbs|vsmacros|vss|vst|vsw|vxd|v.d|wbt|wch|wcm|wiz|wmd|wmf|wml|wms|wmz|ws|wsc|wsf|wsh|wsz|xpi|xlw|xsl|xul)$</name_expr><name_expr_type>regular_expr</name_expr_type><comment>Attachment type not permitted; please contact 1-866-359-1130.</comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr></content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>^.*?\.(eml|msg)$</name_expr><name_expr_type>regular_expr</name_expr_type><comment>Please request the sender copy the contents of the .eml or .msg attachments into the body of a new message for you.</comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr></content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>document.zip</name_expr><name_expr_type>simple_text</name_expr_type><comment>The attachment name is not allowed due use by viruses; please rename it.</comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr>.*(video|audio)/.*</content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>girls.zip</name_expr><name_expr_type>simple_text</name_expr_type><comment>The attachment name is not allowed due use by viruses; please rename it.</comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr>.*(video|audio)/.*</content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>screensaver.zip</name_expr><name_expr_type>simple_text</name_expr_type><comment>The attachment name is not allowed due use by viruses; please rename it.</comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr>.*(video|audio)/.*</content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>readme.zip</name_expr><name_expr_type>simple_text</name_expr_type><comment>The attachment name is not allowed due use by viruses; please rename it.</comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr>((zz-)?application|image)/.*(wmf|metafile)$</content_type_expr><content_type_expr_type>regular_expr</content_type_expr_type><name_expr>^(reg_pass-data|reg_pass|question_list|mailtext|mail_body|mail|list|email_text|)\d*(\.zip)$</name_expr><name_expr_type>simple_text</name_expr_type><comment>Metafile data found in the image; contact Frank 1-866-359-1130.</comment><filter_type>content_type</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr>text/calendar</content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>*.scr</name_expr><name_expr_type>simple_text</name_expr_type><comment>.scr screen saver virus; contact Frank 1-866-359-1130.</comment><filter_type>name</filter_type><filter_action>drop</filter_action></attach_filter><attach_filter><content_type_expr>text/calendar</content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>^.*?\.(.*\{.*)$</name_expr><name_expr_type>regular_expr</name_expr_type><comment>Attachment name's extension contains illegal bracket:  {</comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr>text/calendar</content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>passw*</name_expr><name_expr_type>simple_text</name_expr_type><comment>Attachment replaced due to name; contact 1-866-359-1130.</comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr>text/calendar</content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>complaints.rtf</name_expr><name_expr_type>simple_text</name_expr_type><comment>Trojan-PSW.Win32.Delf.vh virus sent from 195.82.99.39 5/14/2007</comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter><attach_filter><content_type_expr></content_type_expr><content_type_expr_type>simple_text</content_type_expr_type><name_expr>^.*?complaint.zip</name_expr><name_expr_type>regular_expr</name_expr_type><comment></comment><filter_type>name</filter_type><filter_action>replace</filter_action></attach_filter></att_filter_expr>
