So I have a client that's been getting the same virus over and over, it has an Inquiry.doc attachment. I've easily blocked attachments before simply by creating a Global Email Filter such as... and it works fine. Though this screenshot is from a server running v66.0.35 On another server I have running v70.0.51 and the below filter will NOT stop any .doc file. It only works if the text "doc" is actually in the message. Whether I set it to search the body or headers it just doesn't seem to come across the filename or extension anymore. Seems something must have changed in the filters and I can't seem to find a way to filter filetypes anymore.