ChrisB

Just setting up a new GroupShield 5.2 server and my usual list of attachments we quarantine regardless are:

BAT
LNK
PIF
VBS
WSH
SHS
SCR
EXE

Anyone block any other extensions that are very unlikely to be a proper file?

DJ Dunk

iTrader: (5)

We quarantine Mpgs, Gifs, Jpgs, the lot

Only stuff like Word docs, PDF's and Excel spreadsheets get through.

ChrisB

Is that so you can vet them first?

DJ Dunk

iTrader: (5)

Something like that

Our system poilcy is, no personal emails. Although often image attachments are work related and it can be a pain. But more often than not they are pictures of Subarus in lakes etc

what would scooby do

unless you block .zip people will just zip their norty files up and attach

ChrisB

It's not so much a policy thing, more virus protection.

GS will be scanning everything to start with, this is just a bit of extra protection against e-mail viruses spreading before new DATs come out.

Fig

zip Quarantine
wav Purge
ppt Quarantine
pps Quarantine
eml Quarantine
jpg Quarantine
vbs Purge
scr Purge
pif Purge
mpg Purge
mpeg Purge
mid Purge
lnk Purge
exe Purge
com Purge
bat Purge
?? Purge
? Purge
[blank] Purge

ozzy

what about .COM & .MSI

The ones with viruses tend to be .SCR and the double barrel jobs like .SCR.MP3 or .XLS.PIF

Stefan

ChrisB

Cheers Fig & Ozzy

stevencotton

Wasn't there also a significant flaw found in the PNG library for Win32 recently as well?

Crush

Can't viruses be transmitted through Adobe Acrobat files too? I think they can, But i'm not 100% sure.

stevencotton

I'm not allowed to say bad things about Windows here though

DJ Dunk

iTrader: (5)

Unless your mail sweeper checks inside archive files like ours

And don't even think about password protecting or renaming it, cos that'll get blocked too

[Edited by DJ Dunk - 1/8/2003 3:33:44 PM]

ChrisB

Steve,

It would easier to say which bits are secure

[Edited by ChrisB - 1/8/2003 5:35:46 PM]