[ExchangeList] Re: file filtering best practice?

  • From: "Maglinger, Paul" <PMAGLINGER@xxxxxxxx>
  • To: <exchangelist@xxxxxxxxxxxxx>
  • Date: Tue, 25 Jul 2006 08:25:19 -0500

Same here.  Quarantine that automatically sends a notification to the
user that something is held up.  If it's something they are expecting or
from someone they know, then we check it before releasing.  That way
we're not checking every zip that gets trapped.

________________________________

From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Martin
Blackstone
Sent: Tuesday, July 25, 2006 7:33
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: file filtering best practice?


We quarantine them, then release if they are OK.
The users don't love it, but they understand it.

________________________________

From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Arnold, Jamie
Sent: Tuesday, July 25, 2006 5:31 AM
To: exchangelist@xxxxxxxxxxxxx
Cc: Exchange2000@xxxxxxxxxxxxxxx
Subject: [ExchangeList] file filtering best practice?



In dealing with zip files specifically, I'm wondering what is considered
the "best practice"?  We simply remove the file at our edge proxy, but
have been getting a little flack from a few users.  Our data shows that
nearly 94% of the .zip files that come in via email are infected so I'm
not likely to be convinced to allow them through.

What say you?

Other related posts: