Strange Behavior

[koby]

Hello Guys ,
My client has received an email with an html attach to it.
this html file contain a javascript code in it.
For future preventing I did create a rule for spam assassin which should catch body rule with "<script" string.

The strange thing is that :
If I download that js file to my local machine and send a NEW mail with that js as an attachment the pmg do find it and this is fine.
But , If I send the original mail from the client to me by using the "forward" option (OWA mail client) the pmg NOT detect it and pass it in....
Please advice

One more question please , How can I block any js attach file with pmg blocking option , I Did add to Dangerous File with "application/javascript (js,jsm,mjs)" but it does not work as expected.


Best Regards ,
Koby Peleg Hen

 

[poetry]

@koby how did the forwarded email look at the destination? It was as attachment or? maybe @Stoiko Ivanov can give us some insight but you need to provide more information like source code of the message and how did you create rules (best give us images so we can see what did you do).

@koby I had more success with blocking file types with Match Filename
Here are my settings: