Security Basics mailing list archives

Re: email attachement/extension block list


From: Micheal Espinola Jr <michealespinola () gmail com>
Date: Tue, 24 Jan 2006 14:21:04 -0500

An expansion of Martin's list:

<http://www.santeriasys.net/attachmentblocklist.html>

On 1/23/06, Kurt Buff <kurt.buff () gmail com> wrote:
Aastra Security Support wrote:
Hi,

I am looking at updating our email security in regards to blocking
attachments. So I am looking for a good recommendation of email
attachments/extension to block. Some of the basic blocks consist of Bat,
Cmd, Exe, Pif, Scr, Vbs, .Shs some of the blocks on the bubble are .Lnk
and .Url.

Other extension like .doc and .zip are a business requirement, so for
now we will allow then but we will scan for virus.

Your thoughts and inputs are greatly appreciated.


Thanks,

Paulo

See this page:

http://www.exchangefaq.org/faq/Exchange-5.5/Martin-Blackstone's-List-of-Danger/sectionID/1017

Watch for url wrapping.

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




--
ME2

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: