We are currently running RT 4.2.12. Users will submit tickets to us in regards to viral email attachments. We’ve instructed users to attach the message file itself versus the attachment to help keep things “safe”. However, I’m seeing that if a user replies to an RT email and attaches the .MSG file, RT is unpacking the email into its components and storing the email and the attachment independently. If I attach the .MSG directly via the web interface it attaches properly. Is this expected behavior or do I need to change something in the system for email attachments?