cPanel's Exim configuration, by default, blocks a list of potentially dangerous attachment file extensions to protect against viruses and malware. While the exact list can vary slightly with updates, here's a common set of extensions that are typically blocked:
Executable files and scripts:
.ade
.adp
.bas
.bat
.chm
.cmd
.com
.cpl
.crt
.exe
.hlp
.hta
.inf
.ins
.isp
.js
(JavaScript).jse
(JScript Encoded Script File).lnk
(Windows Shortcut).mda
.mdb
2
.mde
.mdz
.msc
.msi
.msp
.mst
.pcd
.pif
(Program Information File).reg
(Registry Entry File).scr
(Screen Saver).sct
(Windows Script Component).shs
(Shell Scrap Object).url
(Internet Shortcut).vb
(VBScript File).vbe
(VBScript Encoded Script File)3
.vbs
(VBScript File).wsc
(Windows Script Component).wsf
(Windows Script File).wsh
(Windows Script Host Settings File)Other potentially problematic files:
.eml
(email message files - often blocked because they can contain embedded malicious content or reference external malicious content).jar
(Java Archive).ace
(ACE Archive).r00
(part of a multi-volume ACE archive).iso
(Disk Image File)z
(Unix Compressed File)
Important Notes:
.zip
file or another non-executable archive format, which can then be safely transmitted. But we block .zip
on incoming emails on some servers on client's requirements.