Attachment filtering not working - ORF Forums

Hello gavpop,

Start the ORF Administration Tool and:
1. Make sure that the Attachment Blacklist test in marked enabled on the 'Filtering > Tests' page
2. Navigate to the 'Blacklists > Attachment Filtering' page, and make sure that, your *.dll entry's expression type is set to 'Simple text'.
3. In case you are using a regex pattern to match certain file types, make sure that the expression type is set to 'Regular expression'

Please note that if you create and entry that filters 'by attachment name' AND 'by MIME content type', both patterns must match at the same time, otherwise the attachment will be allowed to pass. For additional details, please consult our related help page: https://vamsoft.com/support/docs/orf-help/5.4.1/adm-oa-attachmentfltr

Please, let me know if this has helped.

Your settings appear to be correct, so I can only think of one or two explanations: The email was malformed or the attachment was broken - perhaps intentionally, for testing purposes. Your mail server might have fixed the message and delivered a working email to the recipient address. Have you tested the *.dll rule with an email that does not come from emailsecuritychek.net? If not, I would suggest you send one to your mail server from an external address.

Furthermore, it is important to note that the Attachment Blacklist test simply examines the filename itself. It does not scan the attachments and, as of today, it does not look into archives either. If you wish to extend ORF’s spam filtering repertoire with antivirus capabilities, you should connect a command line scanner, such as ClamAV (http://vamsoft.com/support/docs/articles/using-clamav-with-ORF-part-1), to it as an External Agent (http://vamsoft.com/support/docs/orf-help/5.4.1/adm-agents-agentprops), or better yet, use an email-enabled anti-virus that integrates with Exchange specifically.

I hope this helps.