3
block attachments by file extension V16
Question asked by Jeff Roberg - 8/30/2017 at 6:33 AM
Answered
How do I set up extension file blocking for attachments?
I am wanting to block .bin .zip .exe etc...

14 Replies

Reply to Thread
0
Derek Curtis Replied
Employee Post Marked As Answer
Hi, Jeff
  1. Log in as the System Admin
  2. Go to the Settings area
  3. Click on General Settings
  4. Look for the Attachments card: here you'll have editable areas for both Incoming Extension Blacklist and Outgoing Extension Blacklist. Click on whichever you want to edit and add your extensions: BIN, ZIP, EXE...one item per line.
  5. Save your changes and you're good to go. 
Derek Curtis COO SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Matthew Leyda Replied
Will this feature be added to Ver 15?
Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP
0
Jeff Roberg Replied
Thanks Derek for the great instructions
I looked there several times but just wasn't seeing it.
0
John Marx Replied
If we choose say .zip to block does it verify it truly is a .zip? I ask as one technique for virus writers and spammers is to use a "legit" extension which in-turn is something malicious. Is it just checking the extension or the actual file type?
0
Derek Curtis Replied
Employee Post
John - we block by extension. So if you have a block for .ZIP files, regardless of whether the file type is actually a ZIP or not it will be blocked.
Derek Curtis COO SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
John Marx Replied
Thanks. I should have been more clear. We have had users getting .jpg, .jpeg, and .zip that are actually .exe files. A user clicks on them and boom a virus or malware is installed (yes there are people without antivirus or malware protection).

If we block .exe but the extension is not .exe how would we stop these type of instances?
0
Derek Curtis Replied
Employee Post
ClamAV *should* detect those. If you can grab a .EML file and send it to us (just send it to sales@) we can test it locally.
Derek Curtis COO SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Steve Guluk Replied
This does not work in SmarterMail Enterprise Version - 100.0.6956

I've added the .doc extension and tested in both incoming and outgoing and we will receive these attachments.

Restarted the SmarterMail service after setting this up.
0
Employee Replied
Employee Post
Steve,

I believe you may need to add the extension without the "." in front of it (i.e., just "doc" instead of ".doc").  Could you give that a try and let us know the results?
0
Steve Guluk Replied
Hey Ben, 
Still processing emails (delivering .doc attachments) with attachments once updating to doc without the ' . '

My doc file is a simple text file renamed to test.doc which properly shows as a Word Doc when reviewed in detail.
0
Employee Replied
Employee Post
Steve,

Have you tested with an actual .doc file created directly in Word by chance?
0
Steve Guluk Replied
Just tested and that also passed through without interruption.
0
Employee Replied
Employee Post
Steve,

Thanks for testing that.  The next thing I could suggest to try would be a minor update to the latest version of SmarterMail as build 6956 is about 17 minor versions behind:

0
Steve Guluk Replied
Ben,
I'm trying to hold off on the updates as they have been cost-prohibitive as well as sometimes introducing other issues.

Do you know where in one of the config or xml files this extension block is set? I can then review the raw configs to see if there is an issue in the setting of this parameter.

Reply to Thread