Re: Email Attachment Blocking

["Sweeny, Jonny" <jsweeny () IU EDU>]

Steve,

Our (public) list of blocked attachment types is here:

http://kb.iu.edu/data/ajch.html

We just removed .zip and .rar from the block list last year.

--
~Jonny Sweeny, GSEC, GCWN, GCIH, GWAS, SSP-CNSA
Incident Response Manager, Lead Security Analyst
Office of the VP for Information Technology, Indiana University
PGP key & S/MIME cert: http://informationpolicy.iu.edu/jsweeny
jsweeny () iu edu - phone: (812)855-4194 - fax: (812)856-1011





-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Steve 
Brukbacher
Sent: Tuesday, January 27, 2009 16:31
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Email Attachment Blocking

Hi,
I'm taking an informal survey to see if others are currently blocking
any email attachments at the mail server (or component of your mail
server infrastructure).  If so, which ones?

If yes, does the email simply get dropped or does the sender and/or
recipient receive some sort of notification?

Any comments on how you worked with your user community on this would be
helpful as well.

-- 
Steve Brukbacher, CISSP
University of Wisconsin Milwaukee
Information Security Architect