D'oh. Minor nit in my procmail recipe. The file extension checking shouldn't be two conditions (procmail does a logical AND of all conditions), so it should read: * name=.*\.(asd|bat|chm|cmd|com|dll|hlp|hta|inf|js|jse|hta|lnk|\ ocx|pif|scr|shb|shm|shs|sys|vb|vbe|vbs|vbx|vxd|wsf|wsh)(")?$ -- MW