block W32.Beagle.J@mm with mailscanner

I've tried editting etc/MailScanner/filename.rules.conf and adding:

deny message.zip$

But when I test this, it still allows the "message.zip" file to pass through.

I notice below that it is set to:

allow \.zip$

so I changed this to:

# allow \.zip$

but it still isnt blocking the attachment.

I did restart the MailScanner service too.

I would like to block all the (name).zip files that are infected with this virus and any help would be appreciated.

 

thanks after playing with it, that did the trick. Here is a sample of what I have to help others.

# These are known to be mostly harmless.
allow \.jpg$ - -
allow \.gif$ - -
# .url is arguably dangerous, but I can't just ban it...
allow \.url$ - -
allow \.vcf$ - -
allow \.txt$ - -
deny Message\.zip$ - -
deny Attach\.zip$ - -
deny Information\.zip$ - -
deny Readme\.zip$ - -
deny Document\.zip$ - -
deny Info\.zip$ - -
deny TextDocument\.zip$ - -
deny TextFile\.zip$ - -
deny MoreInfo\.zip$ - -
allow \.t?gz$ - -

NOTE*: The attachment name is case sensitive so make sure they are capitalized.