Back to Community Threads
Enhance file extension filtering configuration / harden DEFAULT settings for new installs
Idea shared by J. LaDow - 1/5/2026 at 11:33 PM
Proposed
J
In light of the recent issues regarding file upload filtering, I propose the following changes:

Add/Change feature option for file extension filtering from exclude/block list format to option of either
  • excluded/blocked (any extensions in list are DENIED - all others ALLOWED - current design)
  • allowed/enabled (any extensions in list are ALLOWED - all others DENIED)
In addition - it is recommended that the option for new installs be switched to arbitrarily block all extensions except for a small list of allowed file types, such as common media types, common document types, and common archive types.  
MailEnable survivor / convert --
Back to Community Threads

Reply to Thread

Enter the verification text
Related Knowledge Base Articles
Set up SmarterMail as an IIS Site in IIS 8SmarterMail > Server Configuration and Management
SmarterMail Server Performance TuningSmarterMail > Server Configuration and Management
Set up SmarterMail as an IIS Site in IIS 10SmarterMail > Server Configuration and Management
Deploying Rspamd For Use With SmarterMailSmarterMail > Server Configuration and Management
Configure an Alternative Linux Web Server for SmarterMailSmarterMail > Server Configuration and Management