Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Bugbear / Lovelorn
- Thread starter sanni
- Start date
We have NAV for Exchange on our system and it doesn't always get everything.
So I too was looking into how to block attachments of X type.
What I came away with was that Exchange doesn't have anything built in to do that. You can buy commercial solutions such as Mailsweeper or XWall (or something "wall" - I think it is xwall) that will allow you to block attachments (and they usually do more as well - such as spam checking, allowing disclaimers to be added to outgoing mail, and such).
If you aren't interested in buying a commercial product, then you can write and register an EventSink to look for certain attachment types and then either let that mail die, or send it to Badmail.
This approach is free, but takes the time and knowhow of programming it.
Along those lines - there is a fellow (Sebastien (sp?) something) in the newsgroups that made a few examples that with very little editing allow you to just what you want.
Here is a link to a Google thread that I posted and he replied to - it has example files that he has put up - they are very helpful. (I have modified these to do a few things to help our server out as well - and even hacked out a version of my own to get SpamAssassain working)
(let me know if that link doesn't work)
So I too was looking into how to block attachments of X type.
What I came away with was that Exchange doesn't have anything built in to do that. You can buy commercial solutions such as Mailsweeper or XWall (or something "wall" - I think it is xwall) that will allow you to block attachments (and they usually do more as well - such as spam checking, allowing disclaimers to be added to outgoing mail, and such).
If you aren't interested in buying a commercial product, then you can write and register an EventSink to look for certain attachment types and then either let that mail die, or send it to Badmail.
This approach is free, but takes the time and knowhow of programming it.
Along those lines - there is a fellow (Sebastien (sp?) something) in the newsgroups that made a few examples that with very little editing allow you to just what you want.
Here is a link to a Google thread that I posted and he replied to - it has example files that he has put up - they are very helpful. (I have modified these to do a few things to help our server out as well - and even hacked out a version of my own to get SpamAssassain working)
(let me know if that link doesn't work)
speedracercjr
MIS
If you have NAV for exchange you can block by attachment types. Just make sure you on the most current build of NAV 3.0 For E2K
unfortunately for us, we are using NAV 2.5 for Exchange and aren't getting money for an upgrade.
that said, our 2.5 still works great at updating itself with the newest definitions and it finds the viruses, so I can't be too unhappy there.
that said, the occasional problem of it alerting that there was a virus, then it quarrintining (sp?) it, and then also delivering it to the person - that is the issue which caused me to write the attachment filter as an EventSink - it works fine if you say to block various files, but doesn't do well if you say block everything but xyz files (it sometimes, but not always, sees forwarded messages as attachments and that will throw that off, and a few other annoyances as well).
but yeah, if you can get the money for it from your company, there are quite a few good commericial options available.
that said, our 2.5 still works great at updating itself with the newest definitions and it finds the viruses, so I can't be too unhappy there.
that said, the occasional problem of it alerting that there was a virus, then it quarrintining (sp?) it, and then also delivering it to the person - that is the issue which caused me to write the attachment filter as an EventSink - it works fine if you say to block various files, but doesn't do well if you say block everything but xyz files (it sometimes, but not always, sees forwarded messages as attachments and that will throw that off, and a few other annoyances as well).
but yeah, if you can get the money for it from your company, there are quite a few good commericial options available.
speedracercjr
MIS
I know its dang near impossible but you gotta talk management into giving you the money for an upgrade. Even if you just get the product with no support your still doing yourself a favor!
EverquestAddict
MIS
Hmmmmm I run Exchange 2k with Norton for Exchange 2.5 with no problems. And, there is a registry hack to block what attachments you specify. I did a search and found 72 popular executables and blocked them all. Norton notifies me via e-mail when it has quarantined an attachment so I can monitor what is going on. We average about 30 to 40 infected incoming e-mails a day.
"I live in my own little world. But it's ok, they know me there"
"I live in my own little world. But it's ok, they know me there"
- Thread starter
- #7
tanx for ur replies,
we have already mcafee groupshield and it will detect infected attachments and replace it with a text file and tell the user that this email had a infect attachments but i want that exchange doesn't send such email for users at all.
SaNaZ
we have already mcafee groupshield and it will detect infected attachments and replace it with a text file and tell the user that this email had a infect attachments but i want that exchange doesn't send such email for users at all.
SaNaZ
- Status