Hi,
There's something you should fix.
docx files are zip and contain files ending in .xml.rels
Unfortunately, the default filename ruleset allows files ending in .xml.rel
(no s).
/etc/MailScanner/filename.rules.conf:
-------------------------------------------------------------------------------------------------------------
# These are in the archives which are Microsoft Office 2007 files (e.g. docx)
allow \.xml\d*\.rel$ - -
allow \.x\d+\.rel$ - -
allow \.rtf$ - -
-------------------------------------------------------------------------------------------------------------
It should probably be
allow \.xml\.rels?$ - -
Figure 1:
===================================================================================================
Edit: - more details...
I also found that a similar thing happens with the pptx format, but for somefile.vml.rels. So, the match may need to be something like
allow \.[vx]ml\.rels?$ - -
... or, whatever else can be in this internal format.