block MS office documents with macros

Questions and answers about how to do stuff
Post Reply
dwmp
Posts: 54
Joined: 05 Feb 2016 13:42

block MS office documents with macros

Post by dwmp » 10 Dec 2018 10:35

Hey guys,

we are using version 3.0.2.6 and want to mark MS Office documents with macros (due to high virus risk) as spam or at least block such mails.
Is there a possibility to do something like that?
Thanks in advance

BR
dwmp

User avatar
pdwalker
Posts: 1202
Joined: 18 Mar 2015 09:16

Re: block MS office documents with macros

Post by pdwalker » 05 Dec 2019 05:35

If you search in the forums, you'll find that this has been discussed.

The short answer is, "kinda". Due to the complexities in the MS Word file format, it is very difficult to consistently do so.

dwmp
Posts: 54
Joined: 05 Feb 2016 13:42

Re: block MS office documents with macros

Post by dwmp » 06 Dec 2019 06:04

ok thanks very much

thewomble
Posts: 44
Joined: 17 Jan 2017 12:52

Re: block MS office documents with macros

Post by thewomble » 08 Dec 2019 00:09

I had some success in blocking using

https://github.com/fmbla/spamassassin-olemacro

but it not a silver bullet. has pdwalker says MS docs can be tricky.

User avatar
pdwalker
Posts: 1202
Joined: 18 Mar 2015 09:16

Re: block MS office documents with macros

Post by pdwalker » 09 Dec 2019 02:26

I'll give this one a try.

I was previously using the ole2macro.pm add in to detect (partially) word macros.

Discussion about that one here: viewtopic.php?t=1547

Post Reply