Re: Exchange Removing Suspious Attachments

From: Les Connor [SBS Community Member] (les.connor_at_DEL.cfive.ca)
Date: 12/01/04 

Date: Wed, 1 Dec 2004 10:02:08 -0600

Hi Dave,

Yes, blocking does nix the chance that the A/V may not recognize a future
threat. But still .....

I don't know about Sophos, but Scanmail (Trend) has options for blocking
attachments, many more options than SBS. You don't have to rely on the A/V
scan to allow/block attachments, you can specifically and selectively block
attachments of any type. And delete or archive, the choice is yours.

So basically you have more ways to get the job done with the A/V product
than you do with SBS attachment blocking. 

-- 
Les Connor [SBS Community Member]
-----------------------------------------------------------
SBS Rocks !
"David Dixon" <anon@anon.com> wrote in message 
news:uNovRq71EHA.3132@TK2MSFTNGP14.phx.gbl...
> Using Sophos.
>
> But the best bit about block attachments that future/unknown virus's are 
> not
> allowed in if they use a exectuable file type.
>
> If Microsoft added a little functionallity into the blocking of 
> attachments
> to extend to delete the message or holding it in Quarentine, I would have 
> a
> happier life.
>
> -- 
> Dave Dixon
> MCAD.net (CM)
> SBS2003 Premium
> "Les Connor [SBS Community Member]" <les.connor@DEL.cfive.ca> wrote in
> message news:OD%23cd4v1EHA.2600@TK2MSFTNGP09.phx.gbl...
>> The solution would be to disable the SBS attachment blocking and let the
> A/V
>> product look after the attachments. What A/V product do you use?
>>
>> -- 
>> Les Connor [SBS Community Member]
>> -----------------------------------------------------------
>> SBS Rocks !
>>
>>
>> "David Dixon" <anon@anon.com> wrote in message
>> news:uf2Utpv1EHA.1152@TK2MSFTNGP14.phx.gbl...
>> > Any emails sent (by a virus) to us with a .exe, .pif or .scr etc virus
>> > attachment, is being removed from the email by Exchange (SP1) by 
>> > default
>> > due
>> > to the remove suspious attachments and continues through to the
> AntiVirus
>> > as
>> > clean - as Exchange has already removed the virus attachment.
>> >
>> > Unfortunatly, this means that our users are getting thousands of emails
>> > which are clean but should have been deleted by the AV.
>> >
>> > Can I get Exchange to delete the emails that have banned attachment
>> > extensions so they go no further ?
>> >
>> > Ps - I am also trying to use ISA's (SP2) SMTP filter with no luck -
> seems
>> > to
>> > work on ".test" but nothing else.
>> >
>> > -- 
>> > Dave Dixon
>> > MCAD.net (CM)
>> > SBS2003 Premium
>> >
>> >
>>
>>
>
>

Relevant Pages

  • RE: SORBS
    ... feature many different public blocking list services (like SORBS), ... Detect Malicious Web Content and Exploits in Real-Time. ... attachments are solely those of the originator and do not necessarily ...
    (Security-Basics)
  • RE: SBS removed email attachments. Where to find them, and allow them through.
    ... Thank you for posting in the SBS newsgroup. ... SBS removed the email attachments, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Missing attachments on outgoing mail sbs2003r2
    ... First we need to find out which Server causes this problem, ... In SBS network, please send a e-mail with PDF attachment to internal ... is the attachments still missing? ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS removed email attachments. Where to find them, and allow them through.
    ... Thank you for posting in the SBS newsgroup. ... SBS removed the email attachments, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Attachment Blocking
    ... Thank you for posting in the SBS newsgroup. ... there is a way to allow these attachments to be ... Exit Outlook 2003. ... If the registry key does not exist, ...
    (microsoft.public.windows.server.sbs)