RE: Some doubts abt Scanmail file blocking

[Martin Blackstone]

Title: Message

The latest version of Scanmail can now tell if you change the extension and thus block it. HOWEVER, it still does not block files inside of ZIPs.

-----Original Message-----
From: ONG Liang Bu (CSC) [mailto:[EMAIL PROTECTED]]
Sent: Saturday, December 15, 2001 5:17 AM
To: MS-Exchange Admin Issues
Subject: Some doubts abt Scanmail file blocking

Hi,

 

I am in the process of evaluating Antigen and comparing with Scanmail which

is already install in house.  I have read with much interest on all discussions of

both products on this list.  There is some discussions on the way both products

block exe attachment and wish to seek the experts thoughts abt this.

 

I have some doubts on the file blocking of Scanmail.  For Antigen it is definitely

blocked by checking the file header of the attachments.  So it knows the file

type even if users rename the extension say exe to txt.  Scanmail will let

the attachment through if the extension is rename even the file type is configured

to be blocked.  That is the reason why for Antigen it will remove exe within a zip

file while Scanmail will ignore if it is zipped.

 

Just checking with you guys any thoughts on which one of this method will cause

problem, say in the event there is an outbreak and the latest pattern is not

available yet?  For me looks like Scanmail will not be so safe.

 

Ong, Liang Bu

Exchange Administrator

National Institute of Education

Singapore

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm

List Charter and FAQ at:
http://www.sunbelt-software.com/exchange_list_charter.htm