Block encrypted document files

Tiago Meireles tmeireles at electroind.com
Wed Oct 5 14:16:16 UTC 2016


We have been receiving spam with malicious content in the form of password
protected .doc and .doct files.

I have created a filename.rules.conf rule to block .doct but how can I
handle the .doc files? I've tried searching to block this in mailscanner and
in clamav but did not see anything promising. 

Thanks,
Tiago



More information about the MailScanner mailing list