Always look both ways before crossing the street.


Andy David 
J Muller International




-----Original Message-----
From: Pete Colsch [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 07, 2001 09:21 AM
To: Exchange Discussions
Subject: Exchange email attachment blocking


Attachment blocking can be highly effective in providing quick and
relatively easy protection for most e-mail based threats until virus
defintions are released. This is especially true for threats which use a
single attachment name (readme.exe). You can leave in place some default
types which compose the majority of the threats (*.vbs and *.shs for
example) and during higher threat periods you may block all attachments of
a specific type (*.exe or *.html) temporarily.

A number of the newer anti-virus products provide this type of protection.
Norton for Microsoft Exchange allows blocking of attachments when used in
VAPI mode or MAPI/VAPI mode. This is the Symantec URL for instructions:
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2000071215411348


Note: After making the registry edits, reboot of the server is not
necessary. You can just stop and restart the NAV service. This also works
in MAPI mode but is not "supported" by Symantec in this mode as heavy
loads or flooding of the server can result in a user being able to open an
infected attachment before it has been scanned/removed by the AV service.

PLEASE, do not run an email server without some kind of AV-protection
installed on it. It makes life so much more difficult for everyone else
and will, eventually, get you fired.



_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to