[SASAG] Spam/AV Filtering

Kurt Buff kurt.buff at gmail.com
Fri Sep 25 12:53:06 PDT 2009


I don't "block" any attachment type, if by that you mean "discard".
However, we do quarantine a very large list of attachment types,
including .zip, all of the various MSOffice attachments, known
executable types, etc.

Users get a (user-configurable, down to hourly, though most do it
daily) email reminder, with those quarantined emails listed first.

We use Maia Mailguard, with some very minor custom revisions.

Kurt

On Fri, Sep 25, 2009 at 09:40,  <eric at kahklen.com> wrote:
> We currently use a spam/av appliance at our gateway.  In addition, we also
> check for attachment types and only allow certain types such as .doc, .pdf,
> .xls....  At times, legitimate types such as zip files are blocked and
> unfortunately there is no way to "whitelist" the sender with certain file
> types so that they can get through to the end users mailbox.  In the past,
> senders have renamed their attachment with a .txt file type.  Although this
> is a convienent solution for the end user, it seems like an easy way to
> circumvent the idea of attachment checking in the first place.  Do most
> people still block attachment types? or do they rely on their AV scanning
> software to quarantine/delete viruses and malware?
>
> Thanks,
> Eric
>
> _______________________________________________
> Members mailing list
> Members at lists.sasag.org
> http://lists.sasag.org/mailman/listinfo/members
>



More information about the Members mailing list