# First skip over base 64 encoded text to save CPU cycles.
~^[[:alnum:]+/]{60,}$~

# reject attachements with following extensions
/name ?="?.*\.(exe|bat|dll|vbs|mp3|com|bmp)"?/ REJECT