03-31-2018 10:05 PM - edited 03-08-2019 07:35 PM
Hello,
Lately we receive mails with the below attachment. This is recognized as gzip and executable file and is therefore blocked by our mail filters.
.emz
.wmz
.mso
How to skip these filetype?
Thanks.
03-31-2018 10:37 PM
03-31-2018 11:03 PM
04-01-2018 04:37 PM
03-24-2022 11:25 PM
Hi
How to add this filter on esa, i only know config on webui
if attachment-filename =="(?i)\\.(emz|wmz|mso)$"
{
skip-filters();
}
regards
03-27-2022 03:03 PM
Hey MohdZulFahmiHassan,
That type of setup is done via the command line only as it's the message filter syntax.
This skip-filters(); at the message filter will only skip remaining message filters, it won't skip all the other scanners.
Now if you want to make the same rule via a content filter, you can definitely do so - but keep in mind the skip-filters(); at the content filter means skip remaining content filter under your filter setup.
Regards,
Mathew
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide