I have the SMTP filter set to filter out attachments with extensions of .pif and .scr. We were getting about 150 sobig emails a day with these attachments and Symantec was taking up way too much processing power in scanning these, so I turned to the SMTP filter. It's not working though, the files are still getting through. I restarted the Firewall service as instructed. Is there something else or does this filter not catch everything? Amy