I am opening up this debate in order to field people’s views on this.
Over the past several months since I have begun sharing my views about
extension blocking. I have received lot’s of e-mail from people asking
me about extension blocking.I also have been critizied for advocating my view from other admins.
Admins who I would of have thought would be open and supporting to the idea.
When I made the decision 2 years ago to begin blocking extensions at the mail gateway.
It was to prevent my end users to receiving vbs scripts. I noticed that my end users
could not be trusted on their own to not execute the attachment. I also noticed that the
various AV products out there were not picking up the viruses.
Now what I am advocating is not new. I did not come up with the idea, nor was I the first
admin to employ such a tactic.
I am however one of it’s most vocal advocates.
I have always sworn by the old adage, “Burn me once, shame on you, Burn me twice, shame onme.”
As admins and IT professionals, if we do not learn from the past and from our mistakes, then how will
we ever learn at all.
So with those points in mind. I will now open the floor to debate.
Feel free to disagree with me and discussthe finer points of security.
I do urge people that before blasting another person on this debate. Be certain who you are blasting.
Read their profile. Look over some of their other posts. We are all reasonable people here, there is no
need for mud slinging.