Question
We are using one message filter to block incoming emails that contains macros files. We required to provide an exception to one entire domain ([email protected]) from following message filter.
==================================
Macros-Filter: if (attachment-filename == "(?i)\\.(xls|doc|ppt|docm)$") AND (((attachment-binary-contains("[Vv][Bb][Aa]")) OR (attachment-filename ==
"(?i)\\.(xlsm|potm|ppsm|sldm|ppam|pptm|docm|dotm|xltm|xlsm)$")) AND (NOT (sendergroup == "RELAYLIST"))) {
edit-header-text("Subject", "^", "NOTICE! [May Contain a Macros file]");
duplicate-quarantine("Policy");
bcc ("[email protected]", "Subject");
drop-attachments-by-name(".*");
notify ("$EnvelopeSender, $EnvelopeRecipients");
drop();
}
==========================================
