block MS office documents with macros

Questions and answers about how to do stuff
Post Reply
dwmp
Posts: 54
Joined: 05 Feb 2016 13:42

block MS office documents with macros

Post by dwmp »

Hey guys,

we are using version 3.0.2.6 and want to mark MS Office documents with macros (due to high virus risk) as spam or at least block such mails.
Is there a possibility to do something like that?
Thanks in advance

BR
dwmp
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: block MS office documents with macros

Post by pdwalker »

If you search in the forums, you'll find that this has been discussed.

The short answer is, "kinda". Due to the complexities in the MS Word file format, it is very difficult to consistently do so.
dwmp
Posts: 54
Joined: 05 Feb 2016 13:42

Re: block MS office documents with macros

Post by dwmp »

ok thanks very much
thewomble
Posts: 50
Joined: 17 Jan 2017 12:52

Re: block MS office documents with macros

Post by thewomble »

I had some success in blocking using

https://github.com/fmbla/spamassassin-olemacro

but it not a silver bullet. has pdwalker says MS docs can be tricky.
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: block MS office documents with macros

Post by pdwalker »

I'll give this one a try.

I was previously using the ole2macro.pm add in to detect (partially) word macros.

Discussion about that one here: viewtopic.php?t=1547
Post Reply