How do I block emails containing zip attachments

Email & Webmail | Updated 2026

If you are receiving spam or phishing emails with .zip attachments, you can create an email filter in cPanel to automatically discard or quarantine messages that contain them.

01. Create the Filter

  1. Log into cPanel > Email > Global Email Filters (applies to all accounts) or Email Filters (per account)
  2. Click "Create a New Filter"
  3. Filter Name: "Block ZIP Attachments"
  4. Rules: Set "Any Attachment" "contains" .zip
  5. Actions: Choose "Discard Message" to silently delete, or "Redirect to Folder" to send to a quarantine folder for review
  6. Click "Create"
Caution

Blocking all zip attachments will also block legitimate files people send you. If you receive zip files from trusted contacts regularly, consider using SpamAssassin instead (cPanel > Email > Spam Filters). SpamAssassin scores messages based on many factors, not just attachment type, so it is less likely to catch legitimate emails. See Greatly Reduce SPAM.

02. Block Other Dangerous Attachment Types

You can create similar filters for other risky file types. Add additional rules in the same filter using "or" logic:

  • .exe - Windows executables (almost always malware in email)
  • .scr - Screensaver files (common malware vector)
  • .js - JavaScript files (used in phishing)
  • .vbs - Visual Basic scripts
  • .bat - Batch files

Need Help With Email Filters?

If you need a more complex filtering setup, our team can help configure rules for your specific needs.

Open a Support Ticket

Quick Recap

  1. Create a filter in cPanel > Email > Global Email Filters
  2. Filter on attachment type containing .zip
  3. Discard or redirect matching messages
  4. Consider SpamAssassin instead if you receive legitimate zip files
  5. Block .exe, .scr, .js too for broader protection

Email filtering · Last updated March 2026 · Browse all Email articles

  • 158 Users Found This Useful

Was this answer helpful?

Related Articles

What is the path to sendmail?

Email & Webmail | Updated 2026 The path to sendmail on Ultra Web Hosting servers is...

What is email forwarding?

Email & Webmail | Updated 2026 Email forwarding automatically sends a copy of incoming...

550-not permitted to relay through this server

Email & Webmail | Updated 2026 The "550 not permitted to relay" error means the mail...

What port does POP3 run on?

Email | Updated 2026 Quick Answer POP3 uses port 110 (unencrypted) or port 995 (SSL/TLS)....

How Do I Change My MX Records

Email & Webmail | Updated March 2026 MX records control where email for your domain is...



Save 30% on web hosting - Use coupon code Hosting30