Exim rejecting messages with .eml attachments

[jlpeifer]

Users have reported if a person replies to an email they send, the reply never gets back to them. Additionally, some users report that email messages forwarded to them never make it through.

An exploration of the Exim log file reveals that email messages received with ".eml" attachments are being bounced.

Specifically, the error reads, "2006-07-11 11:02:12 1G0Jka-0006wE-2q cancelled by system filter: This message has been rejected because it has\na potentially executable attachment\n (null).eml\nThis form of attachment has been used by\nrecent viruses or other malware.\nIf you meant to send this file then please\npackage it up as a zip file and resend it."

I'd prefer that messages with .eml attachments go through without interference. What can I do to stop this from happening?

[jlpeifer]

Make a backup of /etc/system_filter.exim

Edit /etc/system_filter.exim and remove all references to "eml" (you'll have to remove the following pipe character "|" that follows the eml entry). Note that "eml" is referenced about 4 times within the file. Each will need to be removed

Restart exim service... DA Control Panel --> Admin Level --> Service Monitor --> (exim) Restart

Security precaution! "eml" attachments have been used to transport viruses to email recipients. Disabling this feature exposes your customers to a potential security risk. A current AntiVirus program on email recipients' workstations should stop any incoming threat (assumng they have such a thing installed).

[ekomaster]

Originally posted by jlpeifer

Edit /etc/system_filter.exim and remove all references to "eml" (you'll have to remove the following pipe character "|" that follows the eml entry). Note that "eml" is referenced about 4 times within the file. Each will need to be removed

Restart exim service... DA Control Panel --> Admin Level --> Service Monitor --> (exim) Restart


I do it all, but messages all the same rejected. Please, promt to me what is the problem?

[djcronos]

I know this is a little old but I had the same problem. I went into /etc/system_filter.exim like mentioned and I removed 'eml|' in 4 different spots, restarted exim, and all is good now.

Check the entire file to make sure you removed all eml| related items.