[SOLVED] HTML attachment rule not overridden by User Welcomelist

[torbho]

Hello everyone,

I am currently using Proxmox Mail Gateway 9 and, due to the increasing number of phishing emails (especially fake invoices delivered as .html attachments), I implemented an additional protection rule.

Setup / Rule:
I created a rule with the following behavior:

If email contains *.html attachment:
- Remove the HTML attachment
- Move the mail to quarantine
- Also place it in attachment quarantine

This works as intended and significantly reduces the risk from malicious emails.

Problem:
The rule is currently not overridden by the User Welcomelist.

Even if a sender is explicitly on a user’s welcomelist:

• the HTML attachment is still removed
• and the email is still moved to quarantine

Expected behavior:
I would expect the User Welcomelist (whitelist) to take precedence or override this rule, so that:

• trusted senders can still deliver their attachments without modification

Question:
Is there a way to design the rule so that the welcomelist is respected (e.g. via rule priority, object configuration, or processing order)?

Thanks in advance for any help!

 

[torbho]

Seem like there is no possibility for the desired rule-system?

 

[torbho]

I’ve found a solution now.

In Proxmox Mail Gateway, I created a new whitelist, but set it to “None matches.” When I add this to my rule that places all emails with HTML attachments into quarantine, the addresses and domains from this list are not filtered.