This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Zip files

We are getting some spam emails that are making their through the ASG to the ends users pc's that contain zip files. The users, not knowing any better (b/c the email come from "delta or USPS") open the zip file, only for it to contain a virus. IS there a way to combat this?


This thread was automatically locked due to age.
Parents
  • Hello,

    i have here nearly the same problem... i block .exe and executable files via mime type filter,
    but as example ... i rename netviewer.exe to netviewer.doc then i .zip'it 
    smtp.log
    ----- 
    2012:06:15-10:11:10 fwsrv1-2 smtpd[15032]: SCANNER[15032]: 1SfRcc-0003uS-7v myemail@mail.com R=1SfRbb-0003pT-2T P=INPUT S=11201653
    2012:06:15-10:11:18 fwsrv1-2 smtpd[15032]: SCANNER[15032]: id="1000" severity="info" sys="SecureMail" sub="smtp" name="email passed" srcip="1.1.1.1" from="myemail@mail.com" to="yourmail@mail.com" subject="test netviewer.zip" queueid="1SfRcc-0003uS-7v" size="11201653"
    2012:06:15-10:11:18 fwsrv1-2 smtpd[15032]: SCANNER[15032]: 1SfRbb-0003pT-2T => work R=SCANNER T=SCANNER
    2012:06:15-10:11:18 fwsrv1-2 smtpd[15032]: SCANNER[15032]: 1SfRbb-0003pT-2T Completed



    -----
    it comes truh my astaro mail av proxy... that is not nice.
    Anything i can do?

    Cheers

    Ferdinand
Reply
  • Hello,

    i have here nearly the same problem... i block .exe and executable files via mime type filter,
    but as example ... i rename netviewer.exe to netviewer.doc then i .zip'it 
    smtp.log
    ----- 
    2012:06:15-10:11:10 fwsrv1-2 smtpd[15032]: SCANNER[15032]: 1SfRcc-0003uS-7v myemail@mail.com R=1SfRbb-0003pT-2T P=INPUT S=11201653
    2012:06:15-10:11:18 fwsrv1-2 smtpd[15032]: SCANNER[15032]: id="1000" severity="info" sys="SecureMail" sub="smtp" name="email passed" srcip="1.1.1.1" from="myemail@mail.com" to="yourmail@mail.com" subject="test netviewer.zip" queueid="1SfRcc-0003uS-7v" size="11201653"
    2012:06:15-10:11:18 fwsrv1-2 smtpd[15032]: SCANNER[15032]: 1SfRbb-0003pT-2T => work R=SCANNER T=SCANNER
    2012:06:15-10:11:18 fwsrv1-2 smtpd[15032]: SCANNER[15032]: 1SfRbb-0003pT-2T Completed



    -----
    it comes truh my astaro mail av proxy... that is not nice.
    Anything i can do?

    Cheers

    Ferdinand
Children
No Data