|
Posted by Leythos on November 13, 2007, 7:23 am
If you were Registered and logged in, you could reply and use other advanced thread options
>
> > That's why yo use your own email server and then block attachments by
> > mime type - and then you block anything that could be malicious by file
> > type (mime type).
>
> While this sorts out 99% of the crap, there's enough worms out there
> that send themselves as ZIP (encrypted, even...).
>
> Virus scanners on mailservers usually try to unpack the archive files
> and remove those files from the content that still look dangerous. But
> even that is growing more and more difficult - the latest bugs in
> Acrobat mean that every PDF could be a problem :-(
Yep, we actually block Zip files except from a specific user account
that only admins can reach. In addition to blocking at the firewall
based on mime type we also use SMTP aware scanners that scan before the
email/attachment reaches the mail server itself. Nothing is perfect,
but we've never had a compromised client in more than 20 years.
--
Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)
| 
XML site map