How can i restrict file types for attachments?

Dan,
A Native solution is to sign up for early access to Automations or wait for the May General Availability release.

Then set up an Automation to based on a formula field detecting that the suffix of the file is invalid and delete the record.  So it will upload and get deleted immediately.