$ 0 0 If you set 'treat all unrecognized files' to block they're DIW. That's 'paranoid' mode IMHO; I've set mine to 'un-trusted'