I'm seeing more and more legitimate emails coming through with Office Macros in attachments. These are usually from outside people who send files from their corporate network that have macros in the template to aid in local printing, etc. AFC is doing a great job at catching them and removing them.
The problem is that our staff often needs these files, which means I need to add X-ASSP-Force-Resend: Yes to the file in the corpus and resend. This works, but requires manual intervention, often on a daily basis. Question: Might there be a way for ASSP to remove the MACRO from the file and send it "macroless?" Same idea with a PDF file, remove javascript, but send the PDF. That at least would let the files through and then I'd only have to manually resend if the macro was needed. Possible? Security concern? Thanks
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
