We are using Scan Mail, and while I would love to get more info on where things are originating from etc., the basic thing is that it blocks all sorts of stuff, and strips off the attachments I have specified, and puts them in quarantine. Then, when Sophos scans the quarantine drive, it shreds anything it recognises as a virus. Anything left in the quarantine folder after that is more than likely safe. (I have scan mail strip out Martin's list of what to block) This worked really well with goner-a as it pulled the .scr file out to quarantine before it hit the store, and then Sophos spotted it and killed it. I must have got that thing come in 100 times, and we did not get hit.
So yes, blocking by file extension is the way to go for sure! -----Original Message----- From: John J. Riley [mailto:[EMAIL PROTECTED]] Sent: December 8, 2001 5:16 PM To: MS-Exchange Admin Issues Subject: Re: Blocking files extentions The antigen software filters the mail as it arrives and blocks it from entering the mailserver. I just purchased it for my school and love it!!!!!!! JRiley ----- Original Message ----- From: "Brenda Anderson" <[EMAIL PROTECTED]> To: "MS-Exchange Admin Issues" <[EMAIL PROTECTED]> Sent: Saturday, December 08, 2001 3:02 PM Subject: Re: Blocking files extentions > We have an Email Filtering Software (Cameo Recon) that scans the messages > that are already in the users mailbox. I did use that to clean all the > .scr files, plus we use Norton. But I read the best way would have been > to block this type of extention. > > List Charter and FAQ at: > http://www.sunbelt-software.com/exchange_list_charter.htm > List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
