Kevin A. McGrail wrote: > We don't even WANT rar files and they are blocked in the bad attachment > list. > However, we are running the virus scan in filter_begin but the bad_filename > check in filter & filter_multipart. So run the virus scan in filter_end instead. And be sure not to run it if the message has already been rejected. Regards, David.