[Esa-l][OT] Attachment blocking

[Mark_Saunders]

I have a few ideas...
The current version of Norton Anti-Virus plugs into Netscape.
I don't believe however, that it plugs into IE.
The Watchguard Firebox allows you to grant or deny specified application
types in the HTTP proxy definition. This would afford you some protection
also, and it's not dependant on the browser you're using.
You may want to check around to see if other vendors firewalls do
content-type checking.
Another idea would be to find a firewall that supports Content Vectoring
Protocol. You could then set up a Norton AntiVirus for Firewalls scanner on
your DMZ. Some firewalls support CVP only for specific proxy types, so find
out if CVP for the HTTP proxy is supported b4 you buy!

-----Original Message-----
From: esa-l-admin at spconnect.com [mailto:esa-l-admin at spconnect.com]On
Behalf Of Andre Kajita - Administrador da Rede
Sent: Monday, July 23, 2001 11:04 AM
To: esa-l at spconnect.com
Subject: [Esa-l][OT] Attachment blocking


Greets,

This is off topic to the procmail filter but I guess a few of you may
have thought about this as it is related to email attachments.

The SirCam worm is makeing it's rounds here in my neck of the woods
even with 20 filtered emails in 2 days.  When I checked out WTF some
of our computers had been hit I discovered that they (both of them)
came in through foreign email accounts - most notably Hotmail.

I do have an email attachment policy that is always ignored, no matter
how simple it is - although when one of their computers break due to
an evil attachment they're left computer-less for at least 2 days (my
way of getting back).

What I'd like to know is if anyone has any type of attachment
filtering mechanism for webmail accounts or know of any other way of
stopping these attachments from coming in other than the simple
blocking of access to these services.

Thanks!
Andre.
--
Arthur Dent: "What's so unpleasant about being drunk?"
Ford Prefect: "You ask a glass of water."
- Douglas Noel Adams, 1952 - 2001
- DNA, so long and thanks for all the books
--
Andre Kajita - Administrador da Rede <admin at camarasjc.sp.gov.br>
Camara Municipal de Sao Jose dos Campos - SP
http://www.camarasjc.sp.gov.br
_______________________________________________
E-mail Security Announce list mailing list
E-mail Security Announce list at spconnect.com
http://www.spconnect.com/mailman/listinfo/esa-l