I can see blocking almost all attachments a few years ago, but with AV on the parameter, it shouldn't be so much of a problem. I tried blocking most attachments, but then users would do an end run, and use IM and/or web storage to move stuff around. Those methods of moving files are a lot harder to scan then email.
Erick > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Geni > Sent: Wednesday, November 16, 2005 10:24 AM > To: Exchange Discussions > Subject: RE: Spam/AV SMTP gateway > > We've been using GFI since about 2001 here (environment of > about 2500 Exchange users). It's done a very nice job > keeping viruses and trojans out, and once we went to the > anti-spam Bayesian filtering (we also kept it in learning > mode for a time), it cut down SIGNIFICANTLY on the crap. > Yes, we still get some false positives. But we were getting > about 10,000 spam messages per day, and I'd say we're down > around 100 now. We also haven't been hit with an e-mail > exploit since 2001. It has been very low-maintenance, it's > very low-cost, simple to configure, and their support's been > reasonably good. For us (we're a public school district) the > low cost is probably the most important factor. > > I'm utterly draconian about attachments - I allow almost > nothing through, and I limit the size drastically - and GFI > does a very nice job of managing that for me. Some users > complain, but a handful have noticed that we haven't been > brought down by any of the 8 bazillion email worms out there, either. > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
