General discussion

Locked

restrict *.exe file in Notes Lotus mail

By kennyf ·
How can I restrict users sending/receving mail attached executable file in Notes Lotus?
Thx

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

restrict *.exe file in Notes Lotus mail

by erikdr In reply to restrict *.exe file in No ...

Not really in Notes or in the mail gateway, I'm afraid. After all they can rename it as .ABC, or pack it into some obscure archive format which is very hard to scan...

We solved this challenge in the following way:
- NTWorkstation: use ACL's preventing users to detach the EXE's at most directories. For the homedirectory etc., where they do have write rights, we introduced an NT shell called SafeGuard. It makes sure that every extension which can be written can NOT be launched as executable (and not renamed either). Works well enough, although in a few cases we had conflicts between apps on a workstation which use the same extension for different purposes.
- W2K Professional: also ACL's, for a start.
Instead of the coarse SafeGuard mechanism, we could use Windows internals: the VDESK architecture.
Identity A) (Virtual Desktop) has Notes and an import/export directory, NOT the homedirectory.
Identity B) has Office and the homedirectory.
Transport of data between the import/export directory and the homedirectory happens through a tool which only allows certain types of data - e.g. DOC, BMP and so. No .ZIP, no .EXE or anything that even smells like that. As import/export happens at a 'refined' stage on user decision, this filtering is much easier than trying to fish the right stuff out of incoming e-mails..

Hope this helps,

<Erik> - The Netherlands

Collapse -

restrict *.exe file in Notes Lotus mail

by kennyf In reply to restrict *.exe file in No ...

The question was auto-closed by TechRepublic

Collapse -

restrict *.exe file in Notes Lotus mail

by qtzar In reply to restrict *.exe file in No ...

If you want you could edit the mail templat that you use.

You will need to find somebody with some Lotus Script skills that could add some checks into the 'send' code and the 'postopen' code for the memo form. This could would basically check the message before being sent or opens for the presence of exe's and then drop the attachment.

But as mentioned in the other email what's going to stop them from changing the extention...

There may be some products that can check the 'header' forthe attachment to work out what type of file it is. I think Group Watchdog DE can do this. ( www.group.de )

Hope this helps,
Declan Lynch.

Collapse -

restrict *.exe file in Notes Lotus mail

by kennyf In reply to restrict *.exe file in No ...

The question was auto-closed by TechRepublic

Collapse -

restrict *.exe file in Notes Lotus mail

by kennyf In reply to restrict *.exe file in No ...

This question was auto closed due to inactivity

Back to Software Forum
5 total posts (Page 1 of 1)  

Related Discussions

Software Forums