This is both a Technical and Administrative Issue.
Technical - IT/Ops has to have a corporate anti-virus solution in place to
prevent inbound and outbound spreading of viruses
Administrative - HR/IT has to have a policy/procedure in place in order for
internal users to be informed on dealing with mail attachments with
unacceptable suffixes
As noted below in the thread, if extensions are not being displayed then
the user wouldn't know, but if one had a mail scrubber in place that would
quarantine deemed unacceptable by the IT/Security staff.
There are some issues with the technical solution especially with
organizations with high speed networks, but the other approach is to also
to monitor the mail queue if the volume exceeds day to day avg volume.
/mark
At 11:55 AM 2/14/01 -0600, Noonan, Wesley wrote:
> > -----Original Message-----
> > From: Matthew Reams [mailto:[EMAIL PROTECTED]]
> > Sent: Wednesday, February 14, 2001 09:07
> > To: 'Ray'; Noonan, Wesley
> > Cc: [EMAIL PROTECTED]
> > Subject: RE: FW: Anna Kournikova virus information - Please Read
> >
> >
> > Not to totally encourage a non-firewall thread...
> >
> > But why not block .exe or .vbs, or whatever? If it's so
> > important to have
> > it sent via email, why can't the sender use some utility like
> > WinZip or
> > pkzip and then attach the file? Who really needs Flash
> > greeting cards and
> > rampant email viruses anyways? The problem we had with our
> > virus scanner on
> > our mail server was that there wasn't an updated virus
> > definition for the
> > Anna's virus yet. That and our users that couldn't
> > distinguish the .vbs
> > extention and double-clicking on the attachment (arrrgh).
>
>I am not saying you *shouldn't*. All I am saying is to consider your
>circumstances before you *do*. A one size fits all security policy is a
>fallacy.
>
>Wes Noonan, MCSE/MCT/CCNA/NNCSS
>Senior QA Rep.
>BMC Software, Inc.
>(713) 918-2412
>[EMAIL PROTECTED]
>http://www.bmc.com
>
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
