Ok, I implemented this feature for version 2.1.7, and update d the documentation already, with the following statement:
If you want to deny all extensions, insert an asterisk / star ( * ) in the extension field, and JForum will handle the rest for you.
Rafael
[originally posted on jforum.net by Rafael Steil]