Koozali.org: home of the SME Server

Blocking email attachments

Offline goodevans

  • 2
  • +0/-0
Blocking email attachments
« on: August 19, 2014, 11:20:12 AM »
Not that hoary old chestnut again!

Well the problem we have is that more and more email virus attacks are coming in using Zip 2 format. If we block them using the magic number, then no-one can send docx or xlsx files by email. But I have everyone trained not to use zip files any more.

Is there any way I can block email attachments by file extension?

Cheers

Dave

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: Blocking email attachments
« Reply #1 on: August 19, 2014, 12:10:18 PM »
goodevans

I agree that ZIPv2 need to be blocked due to the amount of viruses .

You can block ZIPv2 file types in the Executable content section in server manager.
I do not understand why you say blocking zip v2 also blocks docx & xlsx, it does not do that on my server.

Train your users to send rar files eg created using WinRAR

If you created your own "magic" code for zipv2 then you did it incorrectly if it is also blocking docx & xlsx

Quote
Is there any way I can block email attachments by file extension?

Ummm, that is the whole idea of the executable content method.
If you determine the magic code for a file type, then you can add that as a exe blocking pattern & have it selectable in server manager.
See the Howto on creating your own magic codes, with many listed already.
I forget the name, something like Virus blocking tutorial Howto, link at top of forums.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline goodevans

  • 2
  • +0/-0
Re: Blocking email attachments
« Reply #2 on: August 19, 2014, 04:13:10 PM »
My apologies, a case of look before you leap (aka investigate before you ask). A colleague had shortened the signature so that docx and zip were a common filetype.

Sorted, thanks.