How to block password protected Word attachment

Discuss here all what concerns the MailCleaner anti-spam efficiency, share your rulesets and tips for SpamAssassin !

Moderators: FlorianB, mentor, Pascal, bourgeois

cglmicro
Posts: 230
Joined: Thu Mar 07, 2013 2:12 am
How did you hear about Mailcleaner: google

How to block password protected Word attachment

Postby cglmicro » Thu Apr 06, 2017 1:11 am

Hi guys.

I receive more and more emails with .DOCX WORD document attached and the password in plain text in the email. As you know, it contain links that lead to infected ransomware, or VBS code.

How do you block these on your MailCleaners?
FlorianB
Posts: 83
Joined: Wed Apr 01, 2015 2:27 pm
How did you hear about Mailcleaner: boulot

Re: How to block password protected Word attachment

Postby FlorianB » Sat Apr 22, 2017 1:07 pm

Hello,
Is this enabled already ?
Configuration -> Content protection -> Message Format Controls -> Password protected archives : Block
As new office documents are archives it should works i suppose.
Regards,
Florian
cglmicro
Posts: 230
Joined: Thu Mar 07, 2013 2:12 am
How did you hear about Mailcleaner: google

Re: How to block password protected Word attachment

Postby cglmicro » Sun Apr 23, 2017 7:38 pm

Hi Florian.

It was ALLOW, I've set it to BLOCK and it still got through on my test no1.
I then tried to send a .7z on my test no2 that also got through.
Now I don't know why, DOCX pass-protected are effectively blocked (X-MailCleaner-SpamCheck: spam, ClamSpam (PUA.SecuriteInfo.com.Encrypted-Microsoft-document.UNOFFICIAL)), but .7z and .zip pass-protected always got through.

Any suggestion why MC is not blocking them also?

Return to “Filter efficiency”

Who is online

Users browsing this forum: No registered users and 1 guest