I just got 2 more ".docx" attachments that were not renamed and I tried
2 different sets of strings in the rule. So 3 questions:

1) What should the g_rename_content string look like?

application/*word*

2) Where should I get the raw email samples to send you? From "view
source" in Thunderbird? Or from the SurgeMail archive?

the users mailbox on the mail server is best (direct file copy), the archive  or view source in thunderbird is ok too.

3) Where should I send the samples? Presumably not to this list.

You should be sending a text file of the message, not forwarding the message, but yes send direct to us at
 
surgemail-support@Netwinsite.com

ChrisP.

Neil


On 2017-05-15 6:19 PM, surgemail-support wrote:

When looking for a missing rule, I discovered a second setting -
g_rename_content - should I be setting that too?

Yes you need g_rename_content too as the email client may append the extension based on the mime type even though the file name was renamed, so the file becomes dangerous anyway.

If it still fails, send me the raw message file to examine, it's possible there is something odd about it that is confusing the mime parser.

	ChrisP.