Re: Analyzing Suspicious Attachment

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2008-01-17 Richard Golodner wrote:
> Why do you allow .zip onto your network anyway? Danger Will Robinson.

Not allowing .zip files will not solve the problem, because people will
just rename the file to *.aaa or something. Either you allow attachments
(what kind doesn't matter, really) or you don't allow attachments. If
you do allow attachments, then you'll have to deal with the risk of
malware coming into your network via that route. Disallowing particular
suffixes will not mitigate this risk.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq