Re: blocking .ZIP attachments

[Theresa M Rowe <rowe () OAKLAND EDU>]

We are blocking .zip just based on the file extension.  You
can still send a .zip file, we just recommend renaming the
extension to something personal - like ".johndata", and
putting in rename instructions in the mail text, like "rename
the attached file from .johndata to .zip."  Once folks
understood that, they were very supportive because of the
decrease in viruses.

Theresa Rowe.

---- Original message ----
> Date: Thu, 19 Aug 2004 16:53:20 -0500
> From: John C Borne <jcb () LSU EDU>
> Subject: [SECURITY] blocking .ZIP attachments
> To: SECURITY () LISTSERV EDUCAUSE EDU
>
> I apologize if this topic has been discussed before, but I
couldn't find
> any direct mention of this specific issue recently.
>
> We have a problem with viruses penetrating the campus "under
the radar" so
> to speak. Before a new virus is detected and the anti-virus
update is
> written, received, and distributed, we have a window of
vulnerability. In
> the past we have lost a considerable amount of time
repairing these
> outbreaks. The vector for many of these infections has been
through
> attachments especially .ZIP's. At first we were
intermittently blocking
> .zip and other attachments; going back and forth between
blocking and
> accepting as each new virus appeared. We found that keeping
the zip's
> blocked had a big impact on minimizing the impact of new
virii.
> We've gotten to the point where we cringe at the thought of
unblocking
> .zip's and would like to make it permanent. Before I propose
this to the
> administration, I wanted to see if anyone could comment on
whether they
> are, or are not, blocking zip's and other attachments and if
not, what
> other solutions they have considered.
>
> Thanks.
>
> John Borne
> Asst Dir for System Support
> Computing Services
> Louisiana State University
>
> **********
> Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/cg/.
Theresa Rowe
Assistant Vice President
University Technology Services
www.oakland.edu/uts - the latest news from University Technology Services

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.