Koozali.org: home of the SME Server

Obsolete Releases => SME Server 8.x => Topic started by: goodevans on August 19, 2014, 11:20:12 AM

Title: Blocking email attachments
Post by: goodevans on August 19, 2014, 11:20:12 AM
Not that hoary old chestnut again!

Well the problem we have is that more and more email virus attacks are coming in using Zip 2 format. If we block them using the magic number, then no-one can send docx or xlsx files by email. But I have everyone trained not to use zip files any more.

Is there any way I can block email attachments by file extension?

Cheers

Dave
Title: Re: Blocking email attachments
Post by: janet on August 19, 2014, 12:10:18 PM
goodevans

I agree that ZIPv2 need to be blocked due to the amount of viruses .

You can block ZIPv2 file types in the Executable content section in server manager.
I do not understand why you say blocking zip v2 also blocks docx & xlsx, it does not do that on my server.

Train your users to send rar files eg created using WinRAR

If you created your own "magic" code for zipv2 then you did it incorrectly if it is also blocking docx & xlsx

Quote
Is there any way I can block email attachments by file extension?

Ummm, that is the whole idea of the executable content method.
If you determine the magic code for a file type, then you can add that as a exe blocking pattern & have it selectable in server manager.
See the Howto on creating your own magic codes, with many listed already.
I forget the name, something like Virus blocking tutorial Howto, link at top of forums.
Title: Re: Blocking email attachments
Post by: goodevans on August 19, 2014, 04:13:10 PM
My apologies, a case of look before you leap (aka investigate before you ask). A colleague had shortened the signature so that docx and zip were a common filetype.

Sorted, thanks.