filer out zip & rar files

[keat63]

I've had a filter configured on a particular inbox along the lines.

If Body contains.zip or .rar, then send a bounce to the sender and discard the message.

I've had this filter for maybe 5 or more years.
Today, it tripped me up.

A customer, '[email protected]' has an email, and in his email footer, words saying something along the lines, 'visit us at www.zipsomething.com' which triggered the filter.

I don't want to block zip files or rar files globally, but only to this specific mailbox.
The filter engine doesn't have a facility 'if file name contains'.

Can anyone suggest a method to block zip or rar files to just one mailbox ?

 

[cPRex]

Hey hey! It seems like the regex is flagging *.zip* - could you tweak it to just be *.zip so it doesn't get any trailing characters? Would that be enough of a change for what you're looking for?

 

[keat63]

I did have the filter configured for just .zip (with no wild cards)
I wonder if a space at the end of .zip might work, eg .zip(space)(cr)

 

[cPRex]

You may need to add some regex so it ends the .zip and doesn't append anything, like .zip$

(this poster does not claim to be a regex master)