[Esd-l] Confused: Catching .wup Files?

[Kevin Hemenway]

 >You may need to set up a whitelist and disable the Windows file magic
 >scanning for people you trust.
 >
 >  :0
 >  * ^From:.*(trusted1|trusted2)@somedomain.com
 >  {
 >    SECURITY_POISON_WINEXE=
 >  }

Does that go before all the other sanitizer stuff?
My current setting (system wide) is:

      # don't check for windows executable magic
      # strings or for microsoft office macros.
      SECURITY_POISON_WINEXE=NO

Is NO an incorrect value here?


-- 
Kevin Hemenway