Educause Security Discussion mailing list archives

Re: Email Attachment Blocking


From: "Kieper, David" <kieperd () UWGB EDU>
Date: Tue, 27 Jan 2009 16:34:20 -0600

I'm taking an informal survey to see if others are currently blocking
any email attachments at the mail server (or component of your mail
server infrastructure).  If so, which ones?

If yes, does the email simply get dropped or does the sender and/or
recipient receive some sort of notification?


We block all executables (.exe, .scr, .bat, .com, .dll), Windows Clipboard Files and McAfee Anti-Virus Definitions (DAT 
files).

Blocked files are replaced with a file that contains a ticket number that they can use to request the help desk recover 
the blocked file.  We rarely get any requests for this.

Regards,

David Kieper                                    
Manager, Network and Infrastructure Services
Information Technology Security Officer
Information Services Division
University of Wisconsin - Green Bay             office: (920) 465-2238
2420 Nicolet Drive                                      fax:    (920) 465-2864
Green Bay, WI  54311-7001   USA                 email:  kieperd () uwgb edu



-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Steve 
Brukbacher
Sent: Tuesday, January 27, 2009 3:31 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Email Attachment Blocking

Hi,
Any comments on how you worked with your user community on this would be
helpful as well.

-- 
Steve Brukbacher, CISSP
University of Wisconsin Milwaukee
Information Security Architect

Current thread: