I would suggest a notification to users telling them that as of X date, the e-mail system will no longer accept/transmit e-mails that have .exe/.bat/or whatever extentions attached. Then give them a breif, and honest explanation of the risks that it poses them and you. You can even include information on how to continue to send these files, but in a faster way (zip)
Keeping up front and honest with your customers will always result in better satisfaction. You are perceived as looking out for them. Jason ----- Original Message ----- From: "Chad Killion" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 02, 2003 10:36 AM Subject: RE: [Declude.Virus] MS Security Patch Emails > We have never filtered EXE before, so it would just cause too many problems > to do this now. We have well over 25 thousand customers using this server, > and I hate to spring something like that on them. The others, sure, we can > exclude those, but just don't want to do EXE. Thanks. > > Chad > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Darrell LaRock > Sent: Thursday, October 02, 2003 10:14 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] MS Security Patch Emails > > Chad, > > Is there any reason why you can't filter on common virus extensions. This > will cutdown on many viruses. It is common practice not to accept exe, com, > bat, pif, scr, and the list goes on... > > Darrell > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Chad Killion > Sent: Thursday, October 02, 2003 11:03 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] MS Security Patch Emails > > Well, I have upgraded to 3.14, but still see TONS of these viruses getting > through. Please help if you can... > > Chad > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Sheldon Koehler > Sent: Wednesday, October 01, 2003 5:38 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] MS Security Patch Emails > > > No wonder I'm still getting slammed with systems trying to send this virus > > to my users. > > This was a big thread back in July. F-Prot was only catching the Blaster > worm if it tried to run (Desktop Real Time). But it was not detected in the > scanning of email even after the definition file updates. F-Prot released > 3.14a to fix this in the actual engine. I was blocking it by banned file > extensions! So this was another valid reason to block certain extensions. > > > Sheldon > > > Sheldon Koehler, Owner/Partner http://www.tenforward.com > Ten Forward Communications 360-457-9023 > Nationwide access, neighborhood support! > > "Whenever you find yourself on the side of the majority, it's time > to pause and reflect." Mark Twain > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
