amavis - To allow only password protected archives

Add these two rules somewhere towards the end
of the list in $banned_filename_re:

# allow if it is or contains any undecipherable components:
[ qr'^UNDECIPHERABLE$'=> 0 ],

qr'^\.(zip|tar)$',  # block zip and tar (unless password protected)