We run Antigen 6.2 on our Exchange 5.5 server. We were advised by Sybari support to include the filter, "*.*.*", which they said are often viruses (e.g. annakournikova.jpg.vbs). We tried it for a while, but were quarantining too many valid user attachments, and they rebelled, so I compromised and removed that filter. We are filtering exe, bat, cmd, com, vbs, vb, js, shs, lnk, pif, scr, hta, htm, and "*.*}" (whatever that is). Also we are using three AV engines, and updating them frequently. As I understand it, the "*.*.*" filter would only come into play on a new virus for which we don't yet have the signature, and is some other scripting language that we are not filtering.
I'd like to get feedback on the protection compromise of not filtering "*.*.*" attachments. How many of you are using that filter? Do you think it adds significant protection? Have we missed any valuable filters? TIA Bob Peitzke Information Systems Manager Sander A. Kessler & Associates Santa Monica, CA, USA [EMAIL PROTECTED] List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm
