add dosexec file magic response to default block rules