Feature request: Block Microsoft Office files containing Macros by default

[Thom van der Boon]

Hi All, 

I get lots of virus mails with .docm files in them. I am strong supporter of by default blocking the Microsoft Office filetypes containing Macros ( .DOCM , .DOTM , .XLSM , .XLTM , .XLAM , .PPTM , .POTM , .PPAM , .PPSM , .SLDM ). 

I added these types to my filename.rules.conf, but I think it is better to block them by MailScanner by default 

deny \.docm$ Possible dangerous Microsoft Word with Macros Possible dangerous attachment 
deny \.dotm$ Possible dangerous Microsoft Word Template with Macros Possible dangerous attachment 
deny \.xlsm$ Possible dangerous Microsoft Excel with Macros Possible dangerous attachment 
deny \.xltm$ Possible dangerous Microsoft Excel Template with Macros Possible dangerous attachment 
deny \.xlta$ Possible dangerous Microsoft Excel with Macros Possible dangerous attachment 
deny \.pptm$ Possible dangerous Microsoft PowerPoint Template with Macros Possible dangerous attachment 
deny \.potm$ Possible dangerous Microsoft Office Open XML Format Presentation Template with Macros Enabled Possible dangerous attachment 
deny \.ppam$ Possible dangerous Microsoft Office Open XML Format Add-in With Macros Possible dangerous attachment 
deny \.ppsm$ Possible dangerous PowerPoint Open XML Macro-Enabled Slide Show With Macros Possible dangerous attachment 
deny \.sldm$ Possible dangerous Microsoft PowerPoint 2007/2010 macro-enabled Open XML slide file Possible dangerous attachment 

Anybody agrees/disagrees? 

Met vriendelijke groet, Best regards, 


Thom van der Boon 
E-Mail: thom at vdb.nl 



===== 



Thom.H. van der Boon b.v. 
Transito 4 
6909 DA Babberich 
Tel.: +31 (0)88 4272727 
Fax: +31 (0)88 4272789 
Home Page: http://www.vdb.nl/ 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20161202/56aa1eca/attachment.html>