Hallo Everybody,<br><br>I've experienced a small flood of virus E-mails.
These E-mails (subj.: "ACH Payment *random number* Canceled") contain
attachments named like: "report_082011-65.pdf.exe"<br>They obviously get
blocked by the "no executables" and "No double file extensions" rules.
The problem is that after blocking them, an automated E-mail is send to the original recipient and theĀ
(faked) sender of the message, informing them of the blocked attachment.<br>
<br>Had the E-mails been processed further, they would've
probably hit the virusscanner (not tested) or spamassassin (gives a score
of 27 when tested) and the E-mail would've silently been discarded as a virus / spam / phishing.<br><br>Is it
possible to let the MailScanner continue it's processing when hitting
the file name rules and / or running the filename rule at a later time?