Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When configuring a mail server, what is the best practice for rejecting an inbound internet email with an executable type I'd like to disallow? Easiest option is an NDR/DSN, but I'd think that could put one at risk to create backscatter.

share|improve this question – quanta Nov 25 '11 at 19:24

When the mail server is sendmail, I install MIMEDefang use it to enforce attachment policy.

share|improve this answer
...which is especially useful since it is a so-called "milter" and allows for real-time filtering. This way, the mail server simply would send a reject response upon reception of the DATA section - NDRs would be someone else's problem then. Sendmail is not the only mailserver to support this, Postfix' before-queue content filters will do the same. – the-wabbit Nov 25 '11 at 21:17
Thanks guys. I read that many MTAs won't honor a reject code like 550 during the DATA section of the conversation, which is concerning. – Ode Nov 29 '11 at 15:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.