[Rspamd-Users] symbol "MIME_BAD_ATTACHMENT" firing on PDF/A attachments?

[Danjel Jungersen]

On 03-02-2026 16:11, Aban Dokht via Users wrote:
> Hello list,
>
> I have the default symbol "MIME_BAD_ATTACHMENT" with score 4 enabled.
> When receiving PDF-Files, which are indeed PDF/A files, I get:
>
> MIME_BAD_ATTACHMENT (4) [pdf:application/pdfa]
>
> in the history.
>
> Is this intended or a false positive?

I have no idea!

But pdf can contain macros, so opening a pdf if a potential risk.

So one could argue that it is a bad attachment...

jm2c
Danjel

PS: Once again I send a kind thought to Adobe for making this awful 
addition to the pdf years ago...

>
> regards
> Aban
>
-- 
Med venlig hilsen/Kind regards
Danjel Jungersen
Mail: danjel at jungersen.dk
Mobile: +45 20 42 20 11

Jungersen Grafisk ApS,
Holsbjergvej 39, DK-2620 Albertslund,
Denmark.
Tel: +45 43 64 10 00

WEBSHOP: PRINTLIGHT.DK <https://www.printlight.dk> | WWW.JUNGERSEN.DK 
<https://www.jungersen.dk>

Logo <https://www.jungersen.dk>