This may be similar to the problem submitted in the posting: "how to block attachments with double-extension attachments", but I don't see any solution information in the thread.

SpamFilter is set up with the following attachments blacklisted:
     *.pif
     *.bat
     *.scr
     *.exe
     *.com

These attachment types (all of them viruses that my mail server AV catches) keep gettign through.  Since wildcards and RegEx are supported, I expected that the list above would block the attachments, but they keep coming through.

I'm using SpamFilter 2.1.2.395.

Any ideas?

Thanks!

The path and filename are, indeed, correct. I just double-checked, even!

...?

Roberto, as I was digging into the log files for the SMTP headers, etc., I discovered that all the mail was coming from a single Qwest.net IP address, and i had whitelisted that network because I have external users that use my mail server to send outbound mail.

That's why what should have ben caught as spam was getting through. Sorry I hadn't noticed that before!

Consider this one resolved - due to your good questions!

With the other posts I've seen regarding mail beign sent from external authorized users (that needs to be relayed through the internal mail server), it might be worth looking into providing some sort of authentication method to allow external systems to connect and relay mail through the Spamfilter or provide some way to connect to the mail server for those clients.

Thanks!

- Scot