Page 1 of 1
block MS office documents with macros
Posted: 10 Dec 2018 10:35
by dwmp
Hey guys,
we are using version 3.0.2.6 and want to mark MS Office documents with macros (due to high virus risk) as spam or at least block such mails.
Is there a possibility to do something like that?
Thanks in advance
BR
dwmp
Re: block MS office documents with macros
Posted: 05 Dec 2019 05:35
by pdwalker
If you search in the forums, you'll find that this has been discussed.
The short answer is, "kinda". Due to the complexities in the MS Word file format, it is very difficult to consistently do so.
Re: block MS office documents with macros
Posted: 06 Dec 2019 06:04
by dwmp
ok thanks very much
Re: block MS office documents with macros
Posted: 08 Dec 2019 00:09
by thewomble
I had some success in blocking using
https://github.com/fmbla/spamassassin-olemacro
but it not a silver bullet. has pdwalker says MS docs can be tricky.
Re: block MS office documents with macros
Posted: 09 Dec 2019 02:26
by pdwalker
I'll give this one a try.
I was previously using the ole2macro.pm add in to detect (partially) word macros.
Discussion about that one here:
viewtopic.php?t=1547