
Find Attachment Filter, PRO version, v1.1

This filter adds specific headers to messages that contains attachments.
The filter finds attachments in the message, then instructs CGPro to add one
header for each type (extension) of attachment found.

For an EXE attachment in the message, you would get x-attachext: exe.
Then it should be easy to set up rules to reject of take specific actions on
particular attachments.

Follow the instructions in the INSTALL file to install the filter and proceed
to the initial configuration.

You can then setup rules to reject specific types of file extension.


If you want to reject, say, *.exe, *.scr, *.com, create a rule that says

Header Field in x-attachext: exe,x-attachext: scr,x-attachext: com
Discard / Reject With: [...]

You can also store these messages in a special folder for later analysis
Store in: ~postmaster/INBOX/Suspicious Extensions
Discard

Or you can go with on the user level and store these messages in a special
folder of the recipient account. This rule must be in the Account rules
or the domain-wide rules:
Store in: INBOX/Suspicious Extensions
Discard

There is two special extensions:
- X-AttachExt: ...
   This means the filter found an attached file that has no extension.
- X-AttachExt: zip.pw
   This means the filter found an attached ZIP file, AND this zip file is
   encrypted. NOTE: The filter will ALSO report a standard zip file
   (X-AttachExt: zip)

The filter can also be used to report messages without a body. When a message
pass through the filter and contains headers but no body at all, the header
X-EmptyBody: YES"
is added to the message.

If you have questions or inquiries regarding this filter or its installation,
please contact info@niversoft.com.
