Hello, Anyone here familiar with MailScanner? I have asked this question on the MailScanner list, but I haven't gotten a reply. I know it must be a simple solution, yet, for the life of me, I can't find the answer. I want to quarantine password-protected file attachments, actually, any file attachments that MailScanner determines as suspicious. Currently, the attachments are being deleted and not quarantined <not good>. After looking through mailscanner.conf I found; <snip> # Reports and Responses # --------------------- # # Do you want to store copies of the infected attachments and messages? # This can also be the filename of a ruleset. Quarantine Infections = yes <snip> However, an attachment was deleted and not stored in /var/spool/MailScanner/quaratine/, according the text message; This is a message from MailScanner E-Mail Virus Protection Service ---------------------------------------------------------------------- The original e-mail message contained potentially dangerous content, which has been removed for your safety. The content is dangerous as it is often used to spread viruses or to gain personal or confidential information from you, such as passwords or credit card numbers. Due to limitations placed on us by the Regulation of Investigatory Powers Act 2000, we were unable to keep a copy of the original attachment. The content filters found this: MailScanner: Message contained password-protected archive ~~~ Where in the conf can I fix this? Many thanks in advance. James