malware email attachment
Question asked by help - April 8 at 10:55 AM
Answered
What do you recommend for block email attachment types. I have exe, zip, etc blocked, but one of pc got infected by "img" - malware created as new unmodifiable drive and antivirus can't delete it.

Is there a complete list to block these kind of attachments?        

7 Replies

Reply to Thread
1
Fred Needham Replied
0
help Replied
Thanks Fred - "img" is not block by Google either 
1
echoDreamz Replied
Marked As Answer
Here are the extensions we block...

ADE
ADP
APP
ASP
BAS
BAT
CER
CHM
CLA
CLASS
CMD
CNT
COM
CPL
CRT
CSH
DER
EXE
FXP
GADGET
GRP
HLP
HPJ
HTA
IMG
INF
INS
ISP
ITS
JAR
JS
JSE
KSH
LNK
MAD
MAF
MAG
MAM
MAQ
MAR
MAS
MAT
MAU
MAV
MAW
MCF
MDA
MDB
MDE
MDT
MDW
MDZ
MSC
MSH
MSH1
MSH1XML
MSH2
MSH2XML
MSHXML
MSI
MSP
MST
OCX
OPS
OSD
PCD
PIF
PL
PLG
PRF
PRG
PS1
PS1XML
PS2
PS2XML
PSC1
PSC2
PST
REG
SCF
SCR
SCT
SHB
SHS
TMP
URL
VB
VBE
VBP
VBS
VSMACROS
VSW
WS
WSC
WSF
WSH
XBAP
XNK

Christopher

0
Linda Pagillo Replied
Which version of SM are you running? If it is anything other than a new install of 17x, you can use Declude (It's free - http://mailsbestfriend.com/downloads/) to block any file extensions that you want to block. You can also block encrypted zips. Please let me know if you have any questions about Declude. I hope this helps.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
help Replied
hi Linda - Smartmail version 16.x
Does it block spear phishing?  
Does it do both STMP block and Spooling?
Does it require to turn of RBL and URBL?

thank you
0
Linda Pagillo Replied
>>Does it block spear phishing?

I can't say without a doubt that it would block all spear phishing, but there are rules we can put in place to make Declude as effective as possible.

>>Does it do both SMTP block and Spooling?

It does not do SMTP blocking, but Smartermail does ;)

>>Does it require to turn of RBL and URBL? 

Yes, it uses over 50 RBLs.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
2
Fred Needham Replied
Great list echoDreamz.
We  use declude - great product.

Here are some other extensions that appear on our block list:
ace
arj
cab
dll
dmg
ico
iso
lib
nsh
rar
sys
vxd
wri
xps

Reply to Thread