Software

Ask something
Discussion Locked

Filtering attachments with a virus

0 helpful
11 replies

by shanna

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We're currently being hammered by email containing the "KLEZ" and "YAHA" viruses. I'm wondering if there is any way to set up some form of content filtering in Exchange 5.5 to block email attachments with certain filename extensions (IE: .bat, .pif,.exe, etc.)?

If there's no way of doing it through Exchange, does anyone have any sggestions for "free" or reasonably priced third party software that would provide that functionality?

Any assistance would be appreciated.

11 replies

by joseph moore

I checked out my copy of Trend Micro (the InetScan eManager settings) and I block attachments that are .EXE, .VBS, .SCR, .COM, .BAT ,.PIF, .REG, .PL, .HTT, and .EML

And when people complain about person X tried to send them an EXE file, I tell them to have the sender ZIP the file.

Then on my mail server, it checks all attachments, including compressed files, for virii.

You can't be paranoid enough in this!

by tlowner

I am using Trend Micro virus software. I block vbs and scr files automatically. Check your virus software and see if it let's you block certain file types

by shmaltz

I use Sybari Antigen, it lets you do what you want, plus content filtering, plus you can choose multiple Virus enginges which will blcok those by default.

by curlergirl

If you are using Outlook as your email client, depending on your version, you may be able to do this through built-in MS software as well. Outlook 98 and above have the built-in ability, with a security patch, to block all the major culprits such as .bat, .pif, .scr, .vbs, etc. There is also a way to manage this through an administrative mailbox that allows you to control what specific extensions you will or will not allow, or will prompt the user as a warning. Check out Technet articles 263296 (for Outlook 98), 263297 (for Outlook 2000) or 290499 (for Outlook 2002). Hope this helps!

This discussion is closed to new replies.