RE: [FW1] Stripping VBS attachments

[Anchises Moraes Guimaraes de Paula]

Norton AntiVirus for Firewall also has the capability to block email
attachments based upon its file extension. I�m using it with Firewall-1 to
block .vbs files.

Best regards,


> Anchises  M. G. de Paula
> AMERICEL
> I.T. - Coordenador de Seguran�a de Informa��es
> email: [EMAIL PROTECTED]
> Fone: (61) 329 6698
> Cel: (61) 929 0641
http://www.americel.com.br



> -----Original Message-----
> From: Martin, Andy [SMTP:[EMAIL PROTECTED]]
> Sent: Friday, May 19, 2000 2:08 PM
> To:   Fw-1-Mailinglist (E-mail)
> Subject:      RE: [FW1] Stripping VBS attachments
> 
> 
> Hi,
> 
> We use MailSweeper from Content Technologies www.mimesweeper.com this has
> lexical scanning capabilities and we were able to stop the love virus by
> scanning for certain nasties in the script. Usefull if like us you have
> legitimate VB stuff coming in every so often.
> 
> Good product works with most Virus software as well.
> 
> Cheers
> 
> Andy
> 
> -----Original Message-----
> From: jkee(contr-ird) [mailto:[EMAIL PROTECTED]]
> Sent: Friday, May 19, 2000 3:47 PM
> To: 'THELLIER, Francis (Kedros)'; 'Perbix Michael'
> Cc: '[EMAIL PROTECTED]'
> Subject: RE: [FW1] Stripping VBS attachments
> 
> 
> 
> Suggestion:
> 
> Use the TrendMicro product called Interscan VirusWall.  It integrates with
> Firewall-1.  It can be used for content filtering -- specifically, filter
> for attachments that end in .vbs.
> 
> Product information at http://www.antivirus.com .  There are probably
> other
> anti-virus or content filtering products that work in a similar way.  I am
> only familiar with this one (and we're happy with it.)  
> 
> jk
> 
> -----Original Message-----
> From: THELLIER, Francis (Kedros) [mailto:[EMAIL PROTECTED]]
> Sent: Friday, May 19, 2000 9:01 AM
> To: 'Perbix Michael'
> Cc: '[EMAIL PROTECTED]'
> Subject: RE: [FW1] Stripping VBS attachments
> 
> 
> 
> Hello,
> 
> this is one of my former message about stripping in Firewall-1 :
> http://msgs.securepoint.com/cgi-bin/get/fw1-0001/17.html
> look for it please,
> But I never found how to strip .vbs files, maybe the respons is in the url
> above,
> but I can't find,
> does anyone have an idea ?
> Thanks in advance,
> 
> > Francis THELLIER
> > -----Message d'origine-----
> > De: Perbix Michael [SMTP:[EMAIL PROTECTED]]
> > Date:       vendredi 19 mai 2000 14:38
> > �:  '[EMAIL PROTECTED]'
> > Objet:      [FW1] Stripping VBS attachments
> > 
> > 
> > I have looked at the FAQ, the archives and some saved mail from the past
> > month, but I can not find any reference to blocking VBS attachments at
> the
> > firewall with SMTP security server.  I already have a SMTP resource in
> > place
> > for the ILOVEYOU virus, can I also add a MIME strip to that resource for
> > the
> > latest virus "fwd: <anyfilename>"?
> > 
> > I want to strip out ALL vbs attachments.  Also if this happens, can I
> put
> > something in the message to indicate it happened?
> > 
> > Thanks again for the help..
> > 
> >     -Mike
> > 
> > ----------------------------------
> > Michael Perbix
> > Technology Network Hardware Technician
> > Lower Merion School District
> > Phone: (610) 896-8267
> > Fax: (610) 896-8224
> > 
> > 
> >
> ==========================================================================
> > ======
> >      To unsubscribe from this mailing list, please see the instructions
> at
> >                http://www.checkpoint.com/services/mailing.html
> >
> ==========================================================================
> > ======
> 
> 
> ==========================================================================
> ==
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ==
> ====
> 
> 
> ==========================================================================
> ==
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ==
> ====
> **********************************************************************
> This email and any files transmitted with it are confidential and 
> intended solely for the use of the individual or entity to whom they   
> are addressed. If you have received this email in error please notify 
> the sender immediately.
> 
> This footnote also confirms that this email message has been swept for
> the presence of computer viruses.
> **********************************************************************
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================