I think you're missing something here.
The situation is as follows (original sender correct me if I'm wrong):

The guy has internal users accessing (external) web-based mail servers
such as yahoo ([advertisement break:-] I only cite this one cos' they're 
running BSD).
So the connection goes between "the two" networks, and thus crosses his 
firewall.
Since this is web-based mail, and not normal-mail-based-mail, smtp filtering
has no effect. The question was thus whether he can allow his users to
surf the web, but stops them from sending mail attachments.

- as Marko said, these attachments correspond to specific URLs. While
keeping an up to date URL db is not that simple, web-based mail is not
that often used, or when used, few servers have the largest share. so, it
is still reasonable to maintain a URL db for that.

- also, content filtering may be used (alone or with URL filtering) to drop
all (or part?) attachments.

I don't like to cite products, but Gauntlet, Websweeper, .... do such things.
probably not in a "perfectly effective" manner, but let everyone check what
he needs agaist what the product provides.


regards,
mouss

At 05:43 09/08/00 -0500, Ron DuFresne wrote:

>I think the confusion here is that this e-mail is not coming into yer
>network in the questioners case, nor is it going out 'your' network.  It
>is going out from the hotmail and yahoo sites.  The user allowed to go to
>hotmail and yahoo to play with 'their' e-mail account is not subject to
>the rules of your system once you allow them to go play on either or both
>of those sites, yes?
>
>Unless I totally misread the question originally asked...

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to