We use software that bans attachments not only based upon the file extensions, but also the file extension of the file within a zip or other archive file. Therefore, we can allow zip files but still ban zip files which contain executables or other potentially malicious file types. John T eServices For You "Seek, and ye shall find!" -----Original Message----- From: exchangelist-bounce@xxxxxxxxxxxxx [mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Arnold, Jamie Sent: Tuesday, July 25, 2006 5:31 AM To: exchangelist@xxxxxxxxxxxxx Cc: Exchange2000@xxxxxxxxxxxxxxx Subject: [ExchangeList] file filtering best practice? In dealing with zip files specifically, I'm wondering what is considered the "best practice"? We simply remove the file at our edge proxy, but have been getting a little flack from a few users. Our data shows that nearly 94% of the .zip files that come in via email are infected so I'm not likely to be convinced to allow them through. What say you?