SOLVED best way to block specific attachment for one recipient domain only

[jfall123]

I have a case where a user with many email accounts under their domain wants to entirely block a common attachment extension (.ZIP). Although I've explained to them this is a bad idea, and ZIP files are not executable and that it comes down to end user education/virus protection yada yada they still want to block this extension.

Obviously I cannot block .ZIP globally as it will affect many other users so I'm looking for a way to block it only for their recipient domain.

This doesn't seem possible using global/user filters in cPanel (unless I'm mistaken) and I don't see an easy way to do it through clam or SA.

I'd assume that it is definitely possible with a custom exim filter but I'm not exactly sure how to write it to both A) only apply when their recipient domain is involved and b) to block certain attachments based on that.

Has anyone done this before and have some custom filter code I could use for this?

 

[cPanelMichael]

Hello,

The following thread should help:

Trying to block zip attachments on incoming messages

You'd simply have to add an additional condition to the filter so it only matches one domain name. This thread shows some examples that would help you when formulating such as rule:

Need to filter ALL email

The updated system filter documentation URL is:

How to Customize the Exim System Filter File - cPanel Knowledge Base - cPanel Documentation

Thanks!