Block dangerous attachment types before they land
Blocking attachments by file extension alone is easy to get around, renaming a file changes nothing about what it actually is. MSH Postfix Milter’s remove attachments by type action instead looks at the real content type of each attachment and strips out anything that matches.
You can match content types exactly, use wildcards such as application/* to cover a whole family
of formats, or fall back to a regular expression for more complex matching.
Choosing what to strip
Common targets include executable and script-like content types, or simply anything you do not want arriving from outside your organization, while still allowing the same formats through on internal mail. Pair the action with a message direction condition, and incoming attachments get a stricter policy than the ones your own staff send each other.
To learn more visit MSH Postfix Milter website.