> your extention of choice.  If the user does not have reveal 
> extentions 
> turned on they will just see the deleted0.txt file name feel 
> safe (because 
> you trained them to feel that way) to go ahead and open the 
> file! The day 

For the longest time, we have blocked all kinds of file types at the
server, and only when ZIPs recently came to be included in virual
threats did we have a dilemma.  Everything else is standard fare,
considering that even in Outlook XP that a user cannot even open an
attached URL (with no known workaround, other than an Exchange
Server)... They've at least had the graciousness to accept the standard
user as unwittingly likely to open attachments.

Recently, before we instituted the "dot com" variable rule, I had a user
that had updated her antivirus moments before receiving a "dot com" that
clearly displayed her attachment as a text file, even though the
extension (showing) was "com".  I cannot thank Providence enough that
her McAfee caught it.

Since we have the policy of denying attachments in place, I'm not quite
ready to give my users ANYTHING they're likely to double-click.  I'd
much rather they get NOTHING.

Regards,
E Geater


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to