From: twesterhever <40121680+twesterhever@users.noreply.github.com>
Date: Sun, 22 Oct 2023 20:25:31 +0000 (+0000)
Subject: [Minor] Add additional bad attachment types
X-Git-Tag: 3.7.2~2^2~2
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=fab67cebb9c1f29966477ba2eabf167435a9c337;p=rspamd.git

[Minor] Add additional bad attachment types

- app: Executable Application, blocked in Outlook by default
- aspx: Active Server Page Extended, blocked in Outlook by default
- dll: Dynamic-link Library
- dqy: Microsoft Query File, blocking recommended in MS365
- iqy: ditto
- mht: MHTML File, often abused for phishing and exploit attempts
- mhtml: ditto
- oqy: Microsoft Query File, blocking recommended in MS365
- rqy: ditto
- slk: Microsoft Symbolic Link
- wim: Windows Imaging Format
---

diff --git a/src/plugins/lua/mime_types.lua b/src/plugins/lua/mime_types.lua
index adf831716..c640d5e58 100644
--- a/src/plugins/lua/mime_types.lua
+++ b/src/plugins/lua/mime_types.lua
@@ -63,12 +63,23 @@ local settings = {
     shtml = 1,
     -- Have you ever seen that in legit email?
     ace = 4,
+    app = 1,
     arj = 2,
+    aspx = 1,
     asx = 2,
     cab = 3,
+    dll = 4,
+    dqy = 2,
+    iqy = 2,
+    mht = 2,
+    mhtml = 2,
+    oqy = 2,
+    rqy = 2,
     sfx = 2,
+    slk = 2,
     vst = 2,
     vss = 2,
+    wim = 2,
     -- Additional bad extensions from Gmail
     ade = 4,
     adp = 4,