diff --git a/config/postfix/body_checks b/config/postfix/body_checks
new file mode 100644
index 000000000..e2eeacc24
--- /dev/null
+++ b/config/postfix/body_checks
@@ -0,0 +1 @@
+/^((Content-(Disposition: attachment;|Type:).*|\ +)| *)(file)?name\ *=\ *"?.*\.(lnk|asd|hlp|ocx|reg|bat|c[ho]m|cmd|exe|dll|vxd|pif|scr|hta|jse?|sh[mbs]|vb[esx]|ws[fh]|wmf)"?\ *$/      REJECT  attachment type not allowed
diff --git a/config/rootfiles/packages/postfix b/config/rootfiles/packages/postfix
index 871b6596f..155942747 100644
--- a/config/rootfiles/packages/postfix
+++ b/config/rootfiles/packages/postfix
@@ -2,6 +2,7 @@ etc/aliases
 #etc/postfix
 #etc/postfix/LICENSE
 #etc/postfix/TLS_LICENSE
+etc/postfix/body_checks
 #etc/postfix/bounce.cf.default
 etc/postfix/header_checks
 etc/postfix/main.cf