/^begin\s+\d{3}\s+.+?\.([lL][nN][kK]|[bB][aA][tT]|[cC][hH][mM]|[cC][mM][dD]|[cC][oO][mM]|[eE][xX][eE]|[hH][tT][aA]|[jJ][sS][eE]?|[jJ][sS]|[pP][iI][fF]|[sS][cC][rR]|[sS][hH][bB]|[vV][bB][esxESX]|[wW][sS][fhFH])(?!\.)\b/ REJECT Your machine may have a virus. /^Content-(Disposition|Type):\s+.+?([fF][iI][lL][eE])?[nN][aA][mM][eE]="?.+?\.([lL][nN][kK]|[bB][aA][tT]|[cC][hH][mM]|[cC][mM][dD]|[cC][oO][mM]|[eE][xX][eE]|[hH][tT][aA]|[jJ][sS][eE]?|[jJ][sS]|[pP][iI][fF]|[sS][cC][rR]|[sS][hH][bB]|[vV][bB][esxESX]|[wW][sS][fhFH])(?!\.)\b/ REJECT Your machine may have a virus. /^\s+([fF][iI][lL][eE])?[nN][aA][mM][eE]="?.+?\.([lL][nN][kK]|[bB][aA][tT]|[cC][hH][mM]|[cC][mM][dD]|[cC][oO][mM]|[eE][xX][eE]|[hH][tT][aA]|[jJ][sS][eE]?|[jJ][sS]|[pP][iI][fF]|[sS][cC][rR]|[sS][hH][bB]|[vV][bB][esxESX]|[wW][sS][fhFH])(?!\.)\b/ REJECT Your machine may have a virus. # Skip over base 64 encoded blocks. This saves lots of CPU cycles. # Expressions by Liviu Daia, amended by Victor Duchovni. ~^[[:alnum:]+/]{60,}\s*$~ OK /^