Cannot ban lzh attachment

[Bastian Blank]

On Tue, Nov 30, 2021 at 02:35:11PM +0200, Nikolaos Milas wrote:
> ### BLOCKED ANYWHERE
>    qr'^\.(exe|lha|cab|dll|lzh)$',

Here you are blocking litral ".lzh", not something ending with .lzh.
This means Amavis will block the type LZH, not a filename.

> Nov 30 09:24:07 mailgw1 amavis[679693]: (679693-19) p005 1/3 Content-Type:
> application/x-rar, base64, size: 279014, SHA1 digest:
> 33ef47204c4cfbcd959b410db9d1de3da815c86f, name: proforma Τιμολόγιο Αρ. M
> 67EE0077.
> lzh

But Amavis reports a rar file.  So you want ".rar".

Bastian

-- 
Warp 7 -- It's a law we can live with.