Email error

[PATRICIAF5]

Can anyone explain the email error” cancelled by system filter: This message has been rejected because it has\na potentially executable attachment "Cyprus.eml"\nThis form of attachment has been used by\nrecent viruses or other malware.\nIf you meant to send this file then please\npackage it up as a zip file and resend it.”

[Carol.P]

This error usually occurs because entries for the .eml extension is included in the "antivirus settings" related file .
Actually when we click “Forward” the original message is being sent as an attachment and the attached original email itself contains an attachment, probably with .eml extension. we may not see this attachment, but it's there.

The .eml extension was originally used by Outlook, but now it has been used for many email programs. Unfortunately it is possible for an .eml file to contain a virus. So many ISP's have started to block all mail moving through their SMTP servers which contain .eml attachments.

And we do not support following extensions.
ad[ep]|ba[st]|chm|cmd|com|cpl|crt|eml|exe|hlp|hta|in[fs]|isp|jse?|lnk|md[be]|ms[cipt]|pcd|pif|reg|scr|sct|shs|url|vb[se]|ws[fhc]

To resolve this issue we can follow any on the one below given steps:

1) you can edit anitivirus file as entries for the .eml extension is included in the "antivirus settings" related file which is being utilized by exim (e-mail) service to overcome spam.
just go to /etc/cpanel_exim_system_filter. and remove all .eml entries and restart exim /scripts/restartsrv_exim

2)if restarting the exim does not work next thing you need to do is if client is using Thunderbird,ask client to change the settings of the e-mail client that they are using to the standard ones where client needs to change option from "Inline" to "as Attachment" from "Tools >> Options >> Composition >> Forward Messages" here change the option from "Inline" to "as Attachment" .
As By default, Thunderbird forwards messages as attachments, rather than as quoted inline in the body of the e-mail.


3)Drag and drop
you can ask client to Compose a message as usual and then drag-and-drop the message to be forwarded from the thread pane (The thread pane is the pane at the top right when you select a folder in the folder pane: The thread pane lists the contents of the current folder. The height of the thread pane depends on the message pane below it, which is described in the next section. ) into the attachment box. This will rename the attachment to "Attached Message" without ".eml" suffix, which will then pass ISP virus filtering.
Following any of the above message will resolve the issue.